Find and fix vulnerable dependencies you rely on with Dependabot.| GitHub Docs
Enable Dependabot alerts to be generated when a new vulnerable dependency is found in one of your repositories.| GitHub Docs
If GitHub discovers insecure dependencies in your project, you can view details on the Dependabot alerts tab of your repository. Then, you can update your project to resolve or dismiss the alert.| GitHub Docs
GitHub sends Dependabot alerts when we detect that your repository uses a vulnerable dependency.| GitHub Docs