If default code security settings have not been changed at the repository, organization, or enterprise level, which repositories receive Dependabot alerts?

Question

Options

• Aprivate repositories
• Bnone
• Crepositories owned by an organization
• Drepositories owned by an enterprise account

• A
  4% (1)
• B
  96% (25)

Explanation

If default code security settings have not been configured at any level (repository, organization, or enterprise), Dependabot alerts are not automatically enabled for any repository. Dependabot alerts must be explicitly enabled - they are not on by default for private repositories (A), organization-owned repositories (C), or enterprise-owned repositories (D). Previously, public repositories had alerts enabled by default, but the key condition here is that no defaults have been changed, meaning nothing has been opted in.

No community discussion yet for this question.