Name: Unlimited
Brand: Storytel
SKU: 7777
Price: 199 THB
Availability: InStock

Trex Team

"Dependabot Workflows: Secure Dependency Updates for GitHub Repos"

Dependency updates are no longer “maintenance”—they’re a frontline control in software supply-chain security. This book is written for experienced engineers, security leads, and platform teams who need Dependabot to behave predictably under real-world constraints: monorepos, private registries, strict CI gates, and compliance-driven audit trails. It focuses on operational correctness and decision-ready mental models, not click-through basics, so you can run dependency automation as an engineered system rather than a background feature.

You’ll build a clear model of how GitHub’s dependency graph, Dependabot alerts, security updates, and scheduled version updates interlock—and where configuration boundaries actually are. The book then goes deep on dependabot.yml v2 job design, advanced allow/ignore strategies, and grouping updates to reduce PR noise without hiding failures. You’ll learn how to prioritize and govern remediation PRs, interpret security update semantics, and design PR lifecycle automation with branch protection, safe automerge, deterministic lockfile practices, and rollback playbooks. Reliability is treated as a first-class goal, with troubleshooting frameworks for stalled updates, schema pitfalls, rate limits, and GitHub Actions-specific risks.

Prerequisites: comfort with GitHub workflows, CI/CD, and dependency management in at least one ecosystem. Coverage includes GitHub.com and GitHub Enterprise Server scope and feature differences, with practical runbooks and decision criteria throughout.

NobleTrex Press

Dependabot Workflows: Secure Dependency Updates for GitHub Repos

ยังใหม่กับ Storytel ใช่ไหม?

เข้าสู่ระบบด้วย...

เข้าสู่ระบบ

มีบัญชีผู้ใช้อยู่แล้วใช่หรือไม่

สร้างบัญชีกับ...

สร้างบัญชี

Enter a Code

Storytel

ด้วย Storytel Unlimited คุณจะได้รับการฟังและการอ่านแบบไม่จำกัดทุกเดือน พร้อมเข้าถึงคลังหนังสือเสียงและอีบุ๊กที่มีมากมาย