{"action":"opened","issue":{"url":"https://api.github.com/repos/prasit-plays/security-strategy-essentials/issues/5","repository_url":"https://api.github.com/repos/prasit-plays/security-strategy-essentials","labels_url":"https://api.github.com/repos/prasit-plays/security-strategy-essentials/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/prasit-plays/security-strategy-essentials/issues/5/comments","events_url":"https://api.github.com/repos/prasit-plays/security-strategy-essentials/issues/5/events","html_url":"https://github.com/prasit-plays/security-strategy-essentials/issues/5","id":546066568,"node_id":"MDU6SXNzdWU1NDYwNjY1Njg=","number":5,"title":"Add Dependabot to your repository","user":{"login":"github-learning-lab[bot]","id":37936606,"node_id":"MDM6Qm90Mzc5MzY2MDY=","avatar_url":"https://avatars0.githubusercontent.com/in/10572?v=4","gravatar_id":"","url":"https://api.github.com/users/github-learning-lab%5Bbot%5D","html_url":"https://github.com/apps/github-learning-lab","followers_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2020-01-07T04:03:49Z","updated_at":"2020-01-07T04:03:49Z","closed_at":null,"author_association":"NONE","body":"## Automated dependency updates with Dependabot\n\nManually going through your dependencies for alerts and outdated versions is tedious work. Let's automate this process!\n\n**Meet Dependabot**\n\n![download](https://user-images.githubusercontent.com/6351798/67623352-53f86200-f7e1-11e9-957d-47bb009f030f.png)\n\nDependabot creates pull requests to keep your dependencies secure and up-to-date!\n\n### How does Dependabot work?\n\nDependabot is the actor for GitHub's automated security fixes. \n\n1. GitHub uses the dependency graph and security alerts to scan your repository and notify you of potential dependency updates\n1. If any dependencies are out-of-date, Dependabot opens a pull request to update each one\n1. If tests pass, and the updated version looks good, you simply merge the pull request\n\n### Configuring automated security fixes\n\nYou can enable automated security fixes for any repository that uses security alerts and the dependency graph. You can disable automated security fixes for an individual repository or for all repositories owned by your user account or organization. GitHub will automatically enable automated security fixes in every repository that uses security alerts and the dependency graph.\n\n![Screen Shot 2019-10-28 at 1 23 52 PM](https://user-images.githubusercontent.com/6351798/67711794-5c3ed180-f988-11e9-97ba-41451996a2fb.png)\n\nHere, we have a security alert on the **debug** dependency. Clicking on **debug** will show you the pull request created by Dependabot to update the dependency. We just updated to `2.6.9` but Dependabot noticed we are still outdated.\n\nIf you navigate to your [pull requests](https://github.com/prasit-plays/security-strategy-essentials/pulls), you'll notice Dependabot has done its job and is trying to bump, or update, the version of `debug`. Feel free to **approve and merge the pull request**.\n\n<details>\n  <summary>How to Install Dependabot if not enabled through automated security fixes</summary>\n\n- Navigate to Dependabot on the [GitHub Marketplace](https://github.com/marketplace/dependabot-preview)\n- Click the \"Install it for free\" button\n- Follow on-screen instructions to add Dependabot to your GitHub profile\n- When installing Dependabot, choose `Only select repositories` and choose this repository, https://github.com/prasit-plays/security-strategy-essentials\n- On `app.dependabot.com`, under `repos you want to add`, select https://github.com/prasit-plays/security-strategy-essentials and click the `Add selected` button\n    \n</details>\n\n#### Important Note!\nDependabot is owned and maintained by GitHub. Dependabot Preview is a public beta for functionality that we are integrating directly into GitHub. These automatic security fixes are in beta and are subject to change.\n\n\n## Close this issue when done\n\n<hr>\n<h3 align=\"center\">I'll respond below when you close the issue.</h3>\n"}}
{"actor":{"display_login":"github-learning-lab"}}