Skip to main content

Manage Dependabot alerts

Learn how to view, manage, and resolve Dependabot alerts to keep your dependencies secure.

Viewing and updating Dependabot alerts

If GitHub discovers insecure dependencies in your project, you can view alert details on the Dependabot tab of your repository. Then, you can update your project to resolve or dismiss the alert.

Managing Dependabot malware alerts

Find and triage malicious dependencies in your project with Dependabot malware alerts.