Dependabot Check

Check and update vulnerable dependencies

majiayu000 6d43e52 2 files · 1.7 KB Updated 567 repo stars

File contents

Dependency Vulnerability Check

Check NuGet and npm dependencies for known vulnerabilities.

What To Do

  1. .NET dependencies:

    dotnet list package --vulnerable --include-transitive
    dotnet list package --outdated
    
  2. npm dependencies:

    npm audit --json > npm-audit.json
    npm audit fix
    
  3. Configure Dependabot (.github/dependabot.yml):

    version: 2
    updates:
      - package-ecosystem: "nuget"
        directory: "/src/backend"
        schedule: { interval: "weekly" }
      - package-ecosystem: "npm"
        directory: "/src/frontend"
        schedule: { interval: "weekly" }
    
  4. Update specific package: dotnet add package PackageName --version X.Y.Z

Arguments

  • --ecosystem=<type>: nuget or npm
  • --auto-merge: Auto-merge minor/patch updates

majiayu000/claude-skill-registry-data/tree/main/security/dependabot-check commit 6d43e527b8

Frequently asked questions

npx skillmds add majiayu000/dependabot-check