Loading
Topic
dependency security
10 posts about dependency security by 7 contributors.
Know dependency security? Share what you know with developers who are learning it.
+ Follow dependency securityBe the first to follow this
- Articles
- 10
- Contributors
- 7
Articles about dependency security
- Article · Cyber Security
Detecting Supply Chain Attacks in AI Coding Tool Extensions
Learn how to identify and reduce supply chain risks in AI coding extensions through inventories, dependency reviews, SBOMs, controlled updates, and runtime monitoring.
- Article · Cyber Security
How to Use the GitHub Dependabot Alerts API to Find Affected Package Versions
Learn how to retrieve GitHub Dependabot alerts with the REST API, interpret vulnerable version ranges, identify patched versions, and review dependency security risks.
- Article · Cyber Security
GitHub Adds More CVE Data to the Security Advisory API
Learn how GitHub's Security Advisory API exposes CVE and dependency vulnerability data for automated security workflows, with a C# API client example.
- Article · Cyber Security
GitHub Advanced Security Trials: What Teams Can Test Before Enabling GHAS
Introduction Security tooling is easier to evaluate when developers can test it against real repositories instead of judging it from feature lists. GitHub Advanced Security, commonly called GHAS, brings several application security capabilities into the GitHub development workflow. These include cod
- Article · Visual Studio
Visual Studio Can Fix Vulnerable NuGet Packages: How It Works
Learn how Visual Studio and NuGet auditing identify vulnerable direct and transitive packages, and how to review and safely remediate dependency updates.
- Article · Cyber Security
GitHub Is Changing Dependabot Alert Retention: What Gets Deleted?
Learn how Dependabot alert retention affects closed vulnerability records and what teams should preserve for security reporting, audits, compliance, and history.
- Article · Cyber Security
NuGet Package Source Mapping: Preventing Dependency Confusion in .NET
Learn how NuGet Package Source Mapping prevents dependency confusion attacks in .NET applications by controlling package sources and securing software supply chains.
- Article · Cyber Security
NuGet API Key Security: Migrating to 30-Day Credentials in CI/CD
Learn how to migrate NuGet API keys to 30-day credentials and secure .NET CI/CD pipelines against credential leakage, unauthorized package publishing, and supply-chain attacks.
- Article · Software Testing
Building Release Gates for AI-Generated Code in Enterprise Repositories
Build release gates for AI-generated code in enterprise repositories using automated security, testing, dependency, quality, and architecture checks before production deployment.
- Article · Cyber Security
Building Automated NuGet Vulnerability Gates for .NET CI Pipelines
Learn how to build automated NuGet vulnerability gates for .NET CI pipelines that detect vulnerable dependencies and enforce security policies before deployment.
