Top Tweets for #DependaBot
Dependabot now enforces a default cooldown on package updates, helping reduce noisy PRs and avoid fragile upgrades. A smarter, less disruptive update cadence for teams. #DevOps #Security #GitHub #Dependabot 🔄📦
DependabotのトリアージをAIでした話。
今度は「リスクレベルが現場実感と合わない」問題に着手。
CVSSだけだと過大/過小になりがちなので
実際の使われ方を踏まえてClaude Codeのプラグインで再トリアージさせる仕組みに。
ノイズが減って「まず直すべき1件」が見えやすくなりました。
#dependabot
以下は、Claudeが勝手にやってくれないです。
Dependabot はOnにしましょうね。コレが無いと脆弱性が発見されたパッケージの更新が自動でされず、攻撃の対象になります。
#個人開発
#Dependabot
🚨 TeamPCP hijacks Bitwarden CLI in supply chain attack, abusing GitHub Dependabot to deploy Shai-Hulud malware and steal developer secrets, poison AI coding tools.
Read: https://t.co/mXjT70iBSk
#CyberSecurity #TeamPCP #Malware #Bitwarden #GitHub #Dependabot
森の見回りをしてくれる、Dependabotさんをお迎えしたよ🐿️✨
古い木の実（ライブラリ）を見つけると、新しいものと交換するお手紙（PR）をせっせと届けてくれる、頼もしい仲間なの🌿
でも全部お任せじゃなくて、私も一緒にセキュリティのお勉強をがんばるね☕️💻
#個人開発 #Dependabot
¡Hola developer 👋🏻!
Pregunta rápida:
Dependabot te dice que es vulnerable…
pero ¿es explotable de verdad? 🤔
He montado una PoC para analizar PRs con más contexto usando Agentic Workflows.
Menos ruido, más señal 🔍
🔗 https://t.co/80zbVliAMc
#GitHub #Dependabot #DevSecOps #AppSec #IA #GitHubAgenticWorkflows
Don’t let your supply chain be a black box. 📦
#Gradle + #GitHub = Automated dependency tracking and faster vulnerability response.
Secure your builds today. 🛡️⚡️
https://t.co/0ECTUNJg1R
#Dependabot
Manual audits can't keep up with dynamic Gradle builds. ⚙️
Automate your security with GitHub’s Dependency Graph & Gradle Build Scan. Trace every CVE to its source. 🔍
https://t.co/0ECTUNJg1R
#Gradle #GitHub #Dependabot #CVE
Declared dependencies are just the tip of the iceberg. 🧊
Use the @gradle + @github integration to surface hidden transitive vulnerabilities and automate your response. 🛡️
Read more: https://t.co/0ECTUNJg1R
#Gradle #GitHub #Dependabot #dependencies
Baseline I’d ship with: Dependabot alerts + security updates, then CodeQL scanning. Quick setup + why it matters in Main Branch #9: https://t.co/fAS6cG4gQW #Dependabot #CodeQL #DevSecOps
AI自動レビューTIPSを書きました
はてなブログに投稿しました
dependabot PRのAI自動レビューをCI完了後に実施させる - Timee Product Team Blog https://t.co/QByfA5Nm5J
#はてなブログ #dependabot #Devin #GitHub_Actions
dependabot-core is now open source with an MIT license - The GitHub Blog (from 18/05/2024) #ruby #rubyonrails #programming #dependabot-core #source #license #GitHub #blog #github https://t.co/iIkyBTSeHA
Devs using Dependabot, listen up! GitHub is changing how those comment commands work for PRs. If you rely on them to update or ignore, you'll want to check out the details. Good to know this well ahead of time! #GitHub #Dependabot
A nice update from our friends at #GitHub 🎉
#Dependabot support for #Gradle #lockfiles is now generally available!
👇 👇 👇
https://t.co/ykmOx4mym7
New Post: Weaponizing Dependabot – Exploiting GitHub Automation for Supply Chain Attacks
Attackers are now exploiting GitHub’s Dependabot to inject malicious code through pull request workflows.
https://t.co/vtalEGKHSf
#github #dependabot #confusedeputy #cybersecurity #hack
Cutting through the noise: How to prioritize #Dependabot alerts - The #GitHub Blog > @ALAColombiaDev has coauthored a great article on dealing with Dependabot alerts. Do you know what EPSS means? You will after reading this… https://t.co/WTOIFmVBhb
Symfony UX auto-updates now run smoothly with Renovate! 🎁
@SymfonyUX #gitlab #github #dependabot #renovate
Decoupling the JavaScript part of Composer packages is something we've often been asked to do.
Now it's done: the `@symfony/ux-*` packages are available on NPM!
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.6M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.2M followers
Taylor Swift
@taylorswift13
82.1M followers
Lady Gaga
@ladygaga
73.6M followers
Virat Kohli
@imvkohli
70.8M followers
Kim Kardashian
@kimkardashian
70M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.2M followers
Neymar Jr
@neymarjr
63.6M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.3M followers
X
@x
60.8M followers