From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Act on any Dependabot alerts by testing and merging pull requests

Act on any Dependabot alerts by testing and merging pull requests - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Act on any Dependabot alerts by testing and merging pull requests

“

- [Narrator] This is a heads up from GitHub to not forget about automatic testing, checking, and shifting left in your CICD process. If our team is not already in a posture of proactive monitoring and regression testing, that's something that I'd like you to seriously think about. Frankly, that's another call out to GitHub co-pilot. One enormous help that GitHub copilot has been to me is in creating unit tests for my code and ensuring I've got test coverage, makes that work a lot easier. Let's get into the demo. Okay I'd like to begin this demonstration by starting at github.com/advisories. I had mentioned in the previous lesson that Dependabot uses one of its many sources for identifying vulnerable dependencies. This centralized GitHub advisory database, which is a really comprehensive and useful source, for not just GitHub customers but for the world to use, because I mean it's given GitHub's reachability and its partnership with all of the major packet repositories and community…

Contents