cognitive cybersecurity intelligence

News and Analysis

Search

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption


GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request.

“The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project,” the Microsoft-owned subsidiary said.

According to GitHub, the

Source: thehackernews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts