Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New check - Use of tools that update deps like dependabot #179

Closed
naveensrinivasan opened this issue Feb 14, 2021 · 2 comments
Closed

New check - Use of tools that update deps like dependabot #179

naveensrinivasan opened this issue Feb 14, 2021 · 2 comments
Assignees
@naveensrinivasan
Labels
help wanted Community contributions welcome, maintainers supportive of idea but not a high priority priority/must-do Upcoming release

Comments

@naveensrinivasan
Copy link
Member

Check if the dependabot is turned on the repository. This helps to identify any vulnerabilities on the project's dependencies.
@naveensrinivasan naveensrinivasan added the help wanted Community contributions welcome, maintainers supportive of idea but not a high priority label Feb 16, 2021
@vin01
Copy link

vin01 commented Feb 23, 2021

Perhaps this should be a general category for automatic dependency updates, also supporting popular tools like Renovate for dependency updates: https://github.com/renovatebot/renovate

@inferno-chromium inferno-chromium changed the title New check - dependabot New check - Use of tools that update deps like dependabot Mar 22, 2021
@naveensrinivasan naveensrinivasan self-assigned this Apr 2, 2021
@naveensrinivasan naveensrinivasan mentioned this issue Apr 2, 2021
Merged
2 tasks
@laurentsimon laurentsimon added this to the milestone-q2 milestone May 11, 2021
@naveensrinivasan
Copy link
Member Author

closing it #322

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@naveensrinivasan naveensrinivasan

Labels
help wanted Community contributions welcome, maintainers supportive of idea but not a high priority priority/must-do Upcoming release
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@naveensrinivasan @inferno-chromium @vin01 @laurentsimon