GitHub Checkout | Dependency Review
- Supply chain security
Dependency Review is a new GitHub Advanced Security feature that allows you to view a “rich diff” of what has changed in your dependency manifest file while reviewing a pull request. With Dependency Review, you can easily see any new, changed or removed dependency, including their age, license information, and vulnerability information.
In this video, Maya Kaczorowski and Sasha Rosenbaum walk us through the details of what the feature can do for you, and show a quick demo of the feature.