Course of Depedabot: Keep your repo up to date, securely and automatically

💸 First lesson available without registration 💸

Your dependencies age every day. And with each passing day, the risk increases: "An unpatched vulnerability can compromise your entire project".

Manually keeping dependencies up to date is tedious, error-prone, and honestly, it's a hassle to do. That's why Dependabot exists: to automate that work safely.

In this course:

• 👌 You will set up Dependabot from scratch for any ecosystem (npm, Python, Java, Docker, GitHub Actions…).
• 🤖 So that it doesn't spam PRs: grouping, ignoring, and versioning strategies.
• 🔥 You will protect your project against supply chain attacks with cooldowns and secure dependency installation.

With all this, you will have a repository always updated without dedicating manual time and with the peace of mind of having mitigated the risks of a Supply Chain Attack.

All with practical examples that you can try as we go along.

In the course, we configure Dependabot with different ecosystems to demonstrate that once you understand the fundamentals, you can apply it to any stack.