From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Describe Dependabot security updates

Describe Dependabot security updates - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Describe Dependabot security updates

“

- [Instructor] Right, so the notion is Dependabot is always running in the background and it hits your repository, looks in your dependencies and sees that not only do you have one or more outdated dependencies not running the current version, but there's known security vulnerabilities that exist in the versions that you have. Here's where we get to the option of giving Dependabot even more control in terms of helping you out. We've seen, and we'll see again in today's demo that Dependabot not only identifies those vulnerabilities but educates you along the way, suggesting how to better secure against this kind of issue happening again. And the various update option, the one I'm thinking of is where Dependabot can be given permission to open pull requests and actually request a merge of a change to your dependency version. So Dependabot can literally take you all the way across the finish line as it were, from detection to remediation and prevention. We know that Dependabot already…

Contents