Thursday, 13 April, 2023

Github updates Dependabot to find vulnerabilities in code

<p>Github has announced a significant update to its Dependabot service. A blog post by the Microsoft-owned company said that they have been working to make Dependabot automatically flag vulnerabilities in users&rsquo; code. The latest update makes Dependabot surf through users&rsquo; code to find where the code is calling insecure paths. Github also hinted on including data on affected functions of each library, improved alerts, flagging development dependencies and more.&nbsp;</p>