Project-MONAI / Project-MONAI/MONAILabel
Enable dependabot automatic fixing of dependencies for improved security
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 891
- Forks
- 269
- Avg merge
- 15h 41m
- Merged PRs (30d)
- 1
Description
Enable dependabot in the security section of this repo. https://github.com/Project-MONAI/MONAILabel/settings/security_analysis
cc: @SachidanandAlle
With these settings turned on (see image below) you will see dependabot alerts such as:
- https://github.com/jamesobutler/MONAILabel/security/dependabot/3 which details a security issue with the current version
requestsbeing used bymonailabel. - https://github.com/jamesobutler/MONAILabel/security/dependabot/4
- https://github.com/jamesobutler/MONAILabel/security/dependabot/2
- https://github.com/jamesobutler/MONAILabel/security/dependabot/1
With the setting to enabled to allow dependabot to automatically open PRs, you will observe that it will open a PR such as:
- https://github.com/jamesobutler/MONAILabel/pull/1.
- https://github.com/jamesobutler/MONAILabel/pull/2
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open the repository Security analysis settings at the linked GitHub URL and review the Dependabot options. Enable Dependabot alerts and automatic dependency-update pull requests; the work is complete when the settings are enabled and Dependabot can report alerts or open updates.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100