You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/CI-CD_DOCUMENTATION/CI-CD_DOCUMENTATION.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,9 +6,9 @@ Dependabot is a GitHub native security tool that goes through the dependencies i
6
6
7
7
- for PRs with version updates, this pipeline comes pre-configured for all current dependency sources in the project, so at "Insights" tab -> "Dependency graph" -> "Dependabot", you should be able to see all tracked sources of dependencies, when they have been checked last and view a full log of the last check
##### - GitHub, through Dependabot, also natively offers a security check for vulnerable dependencies
@@ -21,13 +21,13 @@ Dependabot is a GitHub native security tool that goes through the dependencies i
21
21
22
22
- By enabling "Dependabot alerts", you would be notified for any vulnerable dependencies in the project. At "Security" tab -> "Dependabot alerts", you can manage all alerts. By clicking on an alert, you would be able to see a detailed explanation of the vulnerability and a viable solution.
##### - The "Dependency graph" option should be enabled by default for all public repos, but in case it isn't:
@@ -40,7 +40,7 @@ Dependabot is a GitHub native security tool that goes through the dependencies i
40
40
41
41
- this option enables the "Insights" tab -> "Dependency graph" section -> "Dependencies" tab, in which all the dependencies for the project are listed, under the different manifests they are included in
0 commit comments