Code security

[Kaleemullahpk51]

Select Topic Area

Show & Tell

Body

The Dependabot category is a place for us to discuss feedback, feature requests, common pitfalls, or just to say hello or “thanks” to your friends at GitHub working on Dependabot. You can also upvote existing requests to get our attention with a simple 👍🏼 👎🏼 .

What is Dependabot?
Dependabot is the friendly update bot that lets you know when you have a security vulnerability with Dependabot alerts, and helps you update that dependency with Dependabot security update PRs. Dependabot also keeps your dependencies up to date more generally with Dependabot version updates.

What about dependabot-core?
GitHub maintains an open-source project called dependabot-core, which is the core logic of Dependabot PR updates. If you have questions, feedback, or feature requests for dependabot-core, this discussion is still the right place!

Helpful Links
Dependabot Security and Version Auto-update Documentation
Dependabot Alerts Documentation
Check out our feedback README and code of conduct to learn more about how GitHub engages with feedback.
Still need help?
For bug reports or other user-specific issues with Dependabot Alerts or UI, head to support.github.com.
For issues like bugs and defects in the logic unique to your language (e.g. parsing manifest files), file an issue instead of opening up a discussion thread.
Note: we aren’t accepting new ecosystems at this time but are working on a long-term plan to make extending to a variety of ecosystems scalable.