Ensure Vulnerability alerts are enabled

GitHub sends Dependabot alerts when detect that scanned repository uses a vulnerable dependency or malware.

Risk Level: medium
Platform: Github
Spectral Rule ID: GH-HRD003

REMEDIATION

Activate Vulnerability alerts:

SaaS:

  1. Go to the repository Insights tab.
  2. Click on Dependency graph.
  3. Click on Allow access

Read more: