[Task] 🛠️ Security: Configure security analysis: Private Vuln Reporting | Dependabot - Githubissues

iPoetDev / ibm-skills-ai-colab-sessions

PORTFOLIO: IBM Skills Build Programme for Artificial Intelligence - CoLab - Live Sessions & Final Project

GNU General Public License v3.0

1 stars 0 forks source link

[Task] 🛠️ Security: Configure security analysis: Private Vuln Reporting | Dependabot #6

Open iPoetDev opened 3 months ago

iPoetDev commented 3 months ago

Task Topic

Other

Task Description

Configure repository security and analysis using GitHub Secuirty Settings

Tasks

[ ] Private vulnerability reporting
[ ] Dependency graph
[ ] Automatic dependency submission
[x] Dependabot
- [x] Dependabot alerts
- [x] Dependabot rules
- [x] Dependabot security updates
- [x] Grouped security updates
- [x] Dependabot version updates
- [x] Dependabot on Actions runners

Code scanning

Tools

[ ] CodeQL analysis
[ ] Other Tools
- [ ] Add any third-party

Protection Rules

[ ] Security alert severity levels: High or Higher
[ ] Standard alert severity level: Only Errors

Secret scanning

[ ] Receive alerts on GitHub for detected secrets, keys, or other tokens.
[ ] Push protection: Block commits that contain supported secrets

Use Case

Outline: Security and analysis features help keep your repository secure and updated.

Enable these features to perform read-only analysis on your repository.

Additional Information

iPoetDev commented 3 months ago

✅ Initailise Dependabot on a weekly basis