Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot alerts: optional comment with dismissal #545

Open
github-product-roadmap opened this issue Aug 17, 2022 · 1 comment
Open

Dependabot alerts: optional comment with dismissal #545

github-product-roadmap opened this issue Aug 17, 2022 · 1 comment
Labels
all Product SKU: All ga Feature phase: Generally available security & compliance Feature area: Code security and compliance shipped Shipped

Comments

@github-product-roadmap
Copy link
Collaborator

github-product-roadmap commented Aug 17, 2022

Summary

Similarly to code scanning, with this change you will be able to add an optional comment when dismissing a Dependabot alert. Dismissal comments are recorded in the alert timeline.

Intended Outcome

You can record the context of an alert closure, which security teams can view when auditing resolved alerts.

How will it work?

When dismissing a Dependabot alert, you will be able to add a comment.
@github github locked and limited conversation to collaborators Aug 17, 2022
@github-product-roadmap github-product-roadmap added all Product SKU: All ga Feature phase: Generally available security & compliance Feature area: Code security and compliance labels Aug 17, 2022
@spaltrowitz
Copy link

spaltrowitz commented Aug 22, 2022

This has shipped to dotcom! https://github.blog/changelog/2022-08-22-dependabot-alerts-optional-dismissal-comment-2/ Leaving open to track release to GHES

@ankneis ankneis added the shipped Shipped label Oct 3, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
all Product SKU: All ga Feature phase: Generally available security & compliance Feature area: Code security and compliance shipped Shipped
Projects
GitHub public roadmap
Status: Q3 2022 – Jul-Sep
Milestone
No milestone
Development

No branches or pull requests
3 participants
@github-product-roadmap @ankneis @spaltrowitz