From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Create a valid Dependabot configuration file - GitHub Tutorial
From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Create a valid Dependabot configuration file
- [Instructor] Well, we've seen thus far that you need to know your YAML, that all of your configuration files in the .github hidden directory are in YAML format, and we know all about that. Specify package ecosystems, configure update rules, do exceptions, and so on. And a case study here for the CodeMix project. This is a project using Python, JavaScript, and Ruby, which, before a Dependabot, means that you've got different stacks and different collections of dependencies. CodeMix, this project, the administrators set up a Dependabot config file that has special settings, that has per language update frequencies and exclusions. This highlights the flexibility and customization that Dependabot gives us.
Contents
-
-
-
-
-
-
-
-
Learning objectives33s
-
(Locked)
Identify the default settings for Dependabot alerts in public and private repositories1m 55s
-
(Locked)
Identify the permissions and roles required to enable Dependabot alerts1m 20s
-
(Locked)
Identify the permissions and roles required to view Dependabot alerts45s
-
(Locked)
Enable Dependabot alerts for private repositories28s
-
(Locked)
Enable Dependabot alerts for organizations1m 3s
-
(Locked)
Create a valid Dependabot configuration file55s
-
(Locked)
Configure notifications for vulnerable dependencies11m 52s
-
-
-
-
-
-
-
-
-
-
-
-