From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Remedy a vulnerability from a Dependabot alert in the context of a pull request

Remedy a vulnerability from a Dependabot alert in the context of a pull request - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Remedy a vulnerability from a Dependabot alert in the context of a pull request

“

- [Instructor] Yeah, just another place where Dependabot is surfaced, for sure. And one nice thing about the pull request system in GitHub is that it gives us and other reviewers an opportunity to both informally inspect the code that's in that change set, but also you can invite others to perform formal code reviews to make sure the change is what you want. Another case study, and again, these case studies are important so we can take the technical content, which sometimes can be abstract, and place it in a real world concrete business scenario like you'll see on your exam. Patch implementation in Fabrikam's pull request. The scenario here is Fabrikam addresses a critical vulnerability in their project by reviewing and merging a pull request that was initiated from a Dependabot alert. And I'll just throw in here, pull requests track every bit of conversation, code reviews, updates to the PR, It's all tracked and that history is always available for your reporting. So great. This…

Contents