Skip to content
AppSec PodcastThe Application Security Podcast — home
← All advice
practitionerOWASP Projects

Use automated pull requests for dependency updates

Said by Jeremy Long ·

“But, what Dependabot does is if a new version of a library comes out, you get a pull request, your CI kicks off, light is green, you can merge the pull request.”

Transcript evidence from Jeremy Long — It’s dependency check, not checker.

Episode notes