of the lower-severity issues are left, this can be seen as a satisfactory state. The general code quality left a good impression on the testing team, just as before with the first assessment in 2020. Since

examining Dapr in June 2020, four members of the Cure53 can specifically conclude that the code quality has been evaluated as solid in terms of structure and readability. At the same time, it is paramount

releases using SLSA-provided builders. We also included recommendations on how Dapr can ensure the quality and integrity of its own supply-chain via its dependency tree. 1 CVE-2023-37475 2 Dapr security