1
0
mirror of synced 2025-12-23 21:07:12 -05:00

[2022-06-15]: Advisory Database Supports Malware Advisories (beta) (#28367)

This commit is contained in:
Felicity Chapman
2022-06-17 12:51:16 +01:00
committed by GitHub
parent 8e4f480017
commit 06e0979e34
16 changed files with 112 additions and 73 deletions

View File

@@ -39,9 +39,12 @@ When {% data variables.product.prodname_dependabot %} is blocked from creating a
![{% data variables.product.prodname_dependabot_alerts %} view showing a pull request link](/assets/images/help/dependabot/dependabot-alert-pr-link.png)
There are three reasons why an alert may have no pull request link:
There are several reasons why an alert may have no pull request link:
1. {% data variables.product.prodname_dependabot_security_updates %} are not enabled for the repository.
{% ifversion GH-advisory-db-supports-malware %}
1. The alert is for malware and there is no secure version of the package.
{% endif %}
1. The alert is for an indirect or transitive dependency that is not explicitly defined in a lock file.
1. An error blocked {% data variables.product.prodname_dependabot %} from creating a pull request.