A pipeline needs to identify known vulnerabilities in third-party libraries used by an application. Which security check is the direct fit?

1. A screenshot comparison only
2. A formatting check only
3. Repository tag sorting
4. Dependency vulnerability scanning