Skip to content

Conversation

@Chris-V
Copy link
Contributor

@Chris-V Chris-V commented Oct 19, 2022

This is all supported natively by GHAS and Dependabot

This is all supported natively by GHAS and Dependabot
@Chris-V Chris-V requested a review from a team October 19, 2022 18:47
Copy link
Contributor

@meriouma meriouma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Je pense à ça, est-ce que GHAS gère le BOM sur les branches/PRs?

@Chris-V
Copy link
Contributor Author

Chris-V commented Oct 19, 2022

Supposé. Il y a aussi un principe de dependency review qui est supposé nous avertir si on introduit des vulnérabilités: https://docs.github.com/en/enterprise-cloud@latest/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-dependency-changes-in-a-pull-request

@Chris-V Chris-V merged commit a57d2f3 into main Oct 19, 2022
@Chris-V Chris-V deleted the dev/sast_only branch October 19, 2022 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants