Skip to content

Commit 5e20023

Browse files
authored
Update responsible-use-autofix-code-scanning.md
1 parent b64f820 commit 5e20023

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

content/code-security/code-scanning/managing-code-scanning-alerts/responsible-use-autofix-code-scanning.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,9 @@ Sometimes a suggested fix includes a change in the dependencies of the codebase.
109109
* _Unsupported or insecure dependencies:_ The system does not know which versions of an existing dependency are supported or secure.
110110
* _Fabricated dependencies:_ The system has incomplete knowledge of the dependencies published in the wider ecosystem. This can lead to suggestions that add a new dependency on malicious software that attackers have published under a statistically probable dependency name.
111111

112+
> [!NOTE]
113+
> Our comprehensive dependency management recommendation continues to be “[AUTOTITLE](/code-security/dependabot)
114+
112115
## Mitigating the limitations of suggestions
113116

114117
The best way to mitigate the limitations of suggestions from {% data variables.product.prodname_copilot_autofix_short %} is to follow best practices. For example, using CI testing of pull requests to verify functional requirements are unaffected and using dependency management solutions, such as the dependency review API and action. For more information, see “[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).”

0 commit comments

Comments
 (0)