Which GitHub security feature should you use to see details of any vulnerable dependency versions within a pull request?

The correct answer is C. dependency review. Dependency review helps you understand dependency changes and the security impact of these changes at every pull request. It provides an easily understandable visualization of dependency changes with a rich diff on the "Files Changed" tab of a pull request. Dependency review…

Configure and use Dependabot and Dependency Review

Question

Options

Adependency graph
Bcode scanning
Cdependency review
DDependabot alerts

How the community answered

(45 responses)

A
9% (4)
B
2% (1)
C
87% (39)
D
2% (1)

Explanation

Dependency review helps you understand dependency changes and the security impact of these changes at every pull request. It provides an easily understandable visualization of dependency changes with a rich diff on the "Files Changed" tab of a pull request. Dependency review informs Which dependencies were added, removed, or updated, along with the release dates How many projects use these components Vulnerability data for these dependencies

Topics

#Dependency Review#Vulnerable dependencies#Pull requests#GitHub Advanced Security

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice