Rewrite of Dependabot Best Practice Guide

[riverma]

Purpose

• Rewrite of Dependabot guide using new template
• Generalized Dependabot guide to be more focused on GitHub Security features rather than just Dependabot alone - this allows us to expand to include more recommendations

  Proposed Changes

• [CHANGE] Content rewrite using new template (see issue ticket below)
• [CHANGE] Additional recommendations for GitHub security beyond just Dependabot
• [REMOVE] References to Python Starter Kit’s Dependabot.yml - it is largely already consistent with the default configuration provided by GitHub for Python projects

  Issues

• 101

  Testing

• Markdown rendering: https://github.com/NASA-AMMOS/slim/tree/gh-security-best-practices/docs/guides/software-lifecycle/security/github-security
• Needs a manual walkthrough with a fresh repository (TO-DO)

[jpl-jengelke]

Looks great! Quite an improvement.

I would also recommend referring readers to concrete implementations of these concepts, and one that we can use right now is the Python Starter Kit. (I realize why we disconnected from it as the primary demonstration vehicle but I am sure that readers will want to see a functioning example.)