Learn how to view, manage, and resolve Dependabot alerts to keep your dependencies secure.
Viewing and updating Dependabot alerts
If GitHub discovers insecure dependencies in your project, you can view alert details on the Dependabot tab of your repository. Then, you can update your project to resolve or dismiss the alert.
Managing Dependabot malware alerts
Find and triage malicious dependencies in your project with Dependabot malware alerts.
Managing alerts that have been automatically dismissed by a Dependabot auto-triage rule
You can filter to see which alerts have been auto-dismissed by a rule, and you can reopen dismissed alerts.
Enabling delegated alert dismissal for Dependabot
Increase your governance over your Dependabot alerts with delegated alert dismissal.