From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Define the dependency graph - GitHub Tutorial
From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Define the dependency graph
- [Instructor] When I first heard of the GitHub dependency graph, which is a visual representation of the relationships between different components, in other words, dependencies. Dependency graph is essentially a software bill of materials, specifically listing all of your dependencies. You can see the dependencies in your application, and then you can see dependence. So you can see bidirectionally where your dependencies are. Now, what I had started to say is when I first heard of the dependency graph and then saw it, I was a little confused. I thought it was like a graph database where you literally see a visualization. It's not really necessary number one. They do mean it that way, that notion of that relationship between nodes. In other words, you've got your dependencies and they may have dependencies and dependence and so on and so forth. So the dependency graph in short, is an easy way to quickly report on the library's frameworks and other dependencies, how they're connected…
Contents
-
-
-
-
-
-
-
Learning objectives27s
-
(Locked)
Define a vulnerability1m 8s
-
(Locked)
Describe Dependabot alerts3m 51s
-
(Locked)
Describe Dependabot security updates2m 37s
-
(Locked)
Define the dependency graph2m 37s
-
(Locked)
Describe how the dependency graph is generated2m
-
(Locked)
Describe how alerts are generated for vulnerable dependencies14m 33s
-
-
-
-
-
-
-
-
-
-
-
-
-