Skip to content

Latest commit

 

History

History
20 lines (17 loc) · 792 Bytes

README.md

File metadata and controls

20 lines (17 loc) · 792 Bytes
Raw

Managing Dependabot Overwhelm

Best practices for maintainers and admin personas for remediating supply chain alerts

  1. Notifications for GH Admins 1. Dependabot settings are on 2. Map stacks and supply chain 3. Configure alerts broadly 1. By time 2. Dependabot version updates 4. Aggregate events to review via audit log
  2. Notifications for Teams/ICs
    1. How to merge PR
    2. Alerts by time
    3. Alerts by escalation
    4. Workflows to enhance communications
    5. Dependency graph with GitHub Actions