Name: Unlimited
Brand: Storytel
SKU: 7777
Availability: InStock

Trex Team

"Dependabot Workflows: Secure Dependency Updates for GitHub Repos"

Dependency updates are no longer “maintenance”—they’re a frontline control in software supply-chain security. This book is written for experienced engineers, security leads, and platform teams who need Dependabot to behave predictably under real-world constraints: monorepos, private registries, strict CI gates, and compliance-driven audit trails. It focuses on operational correctness and decision-ready mental models, not click-through basics, so you can run dependency automation as an engineered system rather than a background feature.

You’ll build a clear model of how GitHub’s dependency graph, Dependabot alerts, security updates, and scheduled version updates interlock—and where configuration boundaries actually are. The book then goes deep on dependabot.yml v2 job design, advanced allow/ignore strategies, and grouping updates to reduce PR noise without hiding failures. You’ll learn how to prioritize and govern remediation PRs, interpret security update semantics, and design PR lifecycle automation with branch protection, safe automerge, deterministic lockfile practices, and rollback playbooks. Reliability is treated as a first-class goal, with troubleshooting frameworks for stalled updates, schema pitfalls, rate limits, and GitHub Actions-specific risks.

Prerequisites: comfort with GitHub workflows, CI/CD, and dependency management in at least one ecosystem. Coverage includes GitHub.com and GitHub Enterprise Server scope and feature differences, with practical runbooks and decision criteria throughout.

NobleTrex Press

Dependabot Workflows: Secure Dependency Updates for GitHub Repos

Inloggen met...

Aanmelden

Aanmelden met...

Een account aanmaken

Enter a Code

Storytel

Met Storytel Unlimited krijg je elke maand onbeperkt luisteren en lezen, met toegang tot een uitgebreide catalogus van audioboeken en e-books.

Maak een account