Category "dependabot"

Exporting Dependabot as JSON

Anyone know how one can export Dependabot findings in GitHub as JSON? I've seen this done before, however can't seem to find anything online about it.

How can I get dependabot to ignore a docker minor version

I'm trying to stay one minor version behind the latest python version, and I was hoping to use dependabot to help with that. I'm using the python slim docker im

CVE-2021-44906 Prototype Pollution in minimist

Github dependabot found potential security vulnerabilities in My dependencies. Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, funct

Dependabot Emails

I have been using dependabot for about a year and recently (past couple of months) I started getting some emails that never came before. There are two types of

Distinguishing between Dependabot security and version update pull requests?

We've had Dependabot enabled for security vulnerabilities on our repos for a while, but just set it up for versioning updates as well. My understanding is that