This version of GitHub Enterprise was discontinued on 2022-02-16. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise. For help with the upgrade, contact GitHub Enterprise support.

Managing vulnerabilities in your project's dependencies

You can track your repository's dependencies and receive Dependabot alerts when GitHub Enterprise Server detects vulnerable dependencies.

About alerts for vulnerable dependencies

GitHub Enterprise Server sends Dependabot alerts when we detect vulnerabilities affecting your repository.

Configuring notifications for vulnerable dependencies

Optimize how you receive notifications about Dependabot alerts.

Viewing and updating vulnerable dependencies in your repository

If GitHub Enterprise Server discovers vulnerable dependencies in your project, you can view them on the Dependabot alerts tab of your repository. Then, you can update your project to resolve or dismiss the vulnerability.

Troubleshooting the detection of vulnerable dependencies

If the dependency information reported by GitHub Enterprise Server is not what you expected, there are a number of points to consider, and various things you can check.