Skip to content

Posts by

Kate Catlin

@KateCatlin

Senior Product Manager at GitHub. Twitter: https://twitter.com/Kate_Catlin

Dependabot now alerts for vulnerable GitHub Actions

Dependabot now alerts for vulnerable GitHub Actions

GitHub Actions gives teams access to powerful, native CI/CD capabilities right next to their code hosted in GitHub. Starting today, GitHub will send a Dependabot alert for vulnerable GitHub Actions, making it even easier to stay up to date and fix security vulnerabilities in your actions workflows.