practitionerOWASP Projects
Use automated pull requests for dependency updates
Said by Jeremy Long ·
“But, what Dependabot does is if a new version of a library comes out, you get a pull request, your CI kicks off, light is green, you can merge the pull request.”
Transcript evidence from Jeremy Long — It’s dependency check, not checker.