jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-23 21:07:12 -05:00
Code Issues Projects Releases Wiki Activity

fix typo

Browse Source
This commit is contained in:
Sarita Iyer
2022-03-23 17:00:37 -04:00
parent 20613aaf77
commit e32a2201d7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review.md
View File

@@ -54,7 +54,7 @@ The dependency review feature becomes available when you enable the dependency g
{% ifversion fpt or ghec or ghes>3.5 or ghae-issue-6396 %}
## Dependency review enforcement
You can use the Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests, and warns you about the associated security vulnerabilities. This gives you better visibility into what is changing in a pull request and prevents vulnerabilities from being introduced to your repository. <!-- Will add link to the Action here once available >
You can use the Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests, and warns you about the associated security vulnerabilities. This gives you better visibility into what is changing in a pull request and prevents vulnerabilities from being introduced to your repository. <!-- Will add link to the Action here once available -->
The Dependency Review GitHub Action check will fail if it discovers any vulnerable package, but will only block a pull request from being merged if the repository owner has required the check to pass before merging. For more information, see "[About protected branches](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/about-protected-branches#require-status-checks-before-merging)."