Reference for supply chain security

Detailed information for all the options you can use to customize how Dependabot maintains your repositories.

Dependabot alerts filters help you prioritize and manage alerts for vulnerable dependencies in your repositories.

Dependabot alerts supports a variety of ecosystems and manifests for dependency scope.

Dependabot responds to commands in comments on its pull requests, making it easy to triage and manage dependency updates.

Dependabot supports a variety of ecosystems and repositories

Find usage information for Dependabot security updates.

Dependency graph supports a variety of ecosystems.

Detailed information on using Dependabot with GitHub Actions.

GitHub uses industry-standard criteria to help you filter Dependabot alerts.

Resolve dependency security issues with error codes, diagnostic information, and solutions for common problems.