AI / Dependabot Interview questions
How do you view Dependabot alerts in a GitHub repository?
Alerts are visible under the repository's Security tab, specifically the "Dependabot alerts" section, which lists every currently open alert along with severity, the affected dependency and version range, and a link to the relevant advisory for more detail.
https://github.com/{owner}/{repo}/security/dependabot
From this view, maintainers with appropriate permissions can filter alerts by severity or ecosystem, see whether an automatic fix pull request already exists for a given alert, and manually dismiss an alert (with a reason, such as "not used in a vulnerable way" or "risk accepted") if it doesn't warrant action for that specific repository's actual usage pattern.
Under which repository tab do you find Dependabot alerts?
Can a maintainer manually dismiss an alert with a reason?
More Related questions...
