Using GitHub preset rules to prioritize Dependabot alerts

Focus on alerts that matter by auto-dismissing low impact development alerts for npm dependencies.

Prerequisites

Before you enable GitHub presets for your repository, you should be familiar with their functionality and purpose. See Dependabot auto-triage rules.

Enabling GitHub preset rules

  1. On GitHub, navigate to the main page of the repository.

  2. Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.

    Screenshot of a repository header showing the tabs. The "Settings" tab is highlighted by a dark orange outline.

  3. In the "Security and quality" section of the sidebar, click Advanced Security.

  4. In the "Dependabot" section, to the right of "Dependabot rules", click .

    Screenshot of the "Advanced Security" page for a repository. The gear icon is highlighted with an orange outline.

  5. In the "GitHub presets" section, to the right of the rule you want to enable, click .

  6. In the "State" section, select the dropdown menu, then click Enabled.

  7. Click Save rule.