search

wellcomecollection / catalogue-api

:crystal_ball: The API for searching the Wellcome Collection catalogue.
https://developers.wellcomecollection.org
MIT License
3 stars 0 forks source link

Report sbt dependency graph to dependabopt #763

Closed kenoir closed 4 months ago

kenoir commented 4 months ago

Who is this change for?

Developers who want to understand if there are any security issues with our code.

What does this change do?

This allows Dependabot to have visibility of security issues in our dependencies and raise relevant alerts.

See: https://github.com/scalacenter/sbt-dependency-submission

[!NOTE] This change does not automatically raise PRs to fix issues, we probably require scala-steward or similar for that.

See https://www.scala-lang.org/blog/2022/07/18/secure-your-dependencies-on-github.html for more information.

kenoir commented 4 months ago

Part of https://github.com/wellcomecollection/platform-infrastructure/issues/431