We need to patch vulnerabilities before we deploy the code