Viewing and updating vulnerable dependencies in your repository

Your repository's Las alertas del dependabot tab lists all open and closed Las alertas del dependabot. You can sort the list of alerts, and you can click into specific alerts for more details. For more information, see "About alerts for vulnerable dependencies."

Viewing and updating vulnerable dependencies

1. En tu instancia de GitHub Enterprise Server, visita la página principal del repositorio.
2. Debajo de tu nombre de repositorio, da clic en Perspectivas.
3. En la barra lateral izquierda, da clic en Gráfica de dependencias.
4. Click the version number of the vulnerable dependency to display detailed information.
5. Review the details of the vulnerability and determine whether or not you need to update the dependency. When you merge a pull request that updates the manifest or lock file to a secure version of the dependency, this will resolve the alert.
6. The banner at the top of the Dependencies tab is displayed until all the vulnerable dependencies are resolved or you dismiss it. Click Dismiss in the top right corner of the banner and select a reason for dismissing the alert.

Further reading

• "About alerts for vulnerable dependencies"
• "Managing security and analysis settings for your repository"
• "Troubleshooting the detection of vulnerable dependencies"