芦苇
发帖子
探索
今天发现最新帖子添加订阅
热门板块
🤖AI💡科技💻开发🧭产品🛠️工具
订阅
关注
下载芦苇 App ↗
我我的
进入阅读器模式

Turn Dependabot Off

Filippo Valsorda,Filippo Valsorda 的安全博客,Go 语言密码学维护者,关于加密、安全与软件供应链。关注

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

添加评论
点赞收藏
点踩分享查看原文
评论
?
参与讨论

登录芦苇

登录后关注作者、收藏内容和参与讨论。

关于作者
Filippo ValsordaFilippo Valsorda 的安全博客,Go 语言密码学维护者,关于加密、安全与软件供应链。
相关文章
Vulnerability reports are not special anymore查看相关内容
To that effect, I've also removed the plans/nix.md file from the current quattro branch. We're having some amazing discussions with nix experts about what the future can look like. But that's for Cinq查看相关内容
A playful place to playfully create robots that play. #RobotKindergarten 引用 Tashan Technology (@Tashantec1): Welcome to #RobotKindergarten 👀 First day at school 🏫 First‑person view from robot 🤖 #TA查看相关内容