[Feature request] New rule: Prevent merge of PR if vulnerability with a certain severity is found

dependabot / demo

🤖 Fork me to try out Dependabot

132 stars 1.76k forks source link

[Feature request] New rule: Prevent merge of PR if vulnerability with a certain severity is found #127

Open norcino opened 1 week ago

norcino commented 1 week ago

Hi, I was hoping to be able to use dependabot to prevent PRs from being completed when one or more vulnerability has been found, with a severity greater than the specified. Apparently it is possible to do this with the Security Code Scan, please I would like to know if maybe I missed something or if this has been planner.