Dependabot Security Updates (Server Beta) #86
Labels
dependabot
Feature: GitHub Dependabot
Enterprise
Product SKU: GitHub Enterprise
preview
Feature phase: Preview
server
Available on Server
shipped
Shipped
Summary
Dependabot Security Updates keep projects secure by opening pull requests that update dependencies to a non-vulnerable version.
This extends Dependabot Security Updates to GitHub Enterprise Server (GHES).
Intended Outcome
Update dependencies which have known vulnerabilities. This helps keep a project secure.
How will it work?
Today, Dependabot Security Updates automatically create a pull request in your repository to upgrade a vulnerable dependency to the minimum possible secure version needed to avoid the vulnerability. This is an automated action corresponding to Security Alerts in your repository, for repositories where Dependency Graph is enabled.
The text was updated successfully, but these errors were encountered: