300-745 · Question #32
A software development company relies on GitHub for managing the source code and is committed to maintaining application security. The company must ensure that known software vulnerabilities are not…
The correct answer is A. Depend-a-bot. Dependabot is a GitHub feature that automatically scans project dependencies, analyzes semantic versioning, and flags or updates components with known vulnerabilities. This prevents insecure software libraries from being introduced into the application.
Question
A software development company relies on GitHub for managing the source code and is committed to maintaining application security. The company must ensure that known software vulnerabilities are not introduced to the application. The company needs a capability within GitHub that can analyze semantic versioning and flag any software components that pose security risks. Which GitHub feature must be used?
Options
- ADepend-a-bot
- BSealed boxes
- CGitHub Actions
- DArtifact attestations
How the community answered
(58 responses)- A78% (45)
- B5% (3)
- C3% (2)
- D14% (8)
Explanation
Dependabot is a GitHub feature that automatically scans project dependencies, analyzes semantic versioning, and flags or updates components with known vulnerabilities. This prevents insecure software libraries from being introduced into the application.
Topics
Community Discussion
No community discussion yet for this question.