You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Dependabot opens PRs for actionable updates to audits
The audit check runs weekly which would only produce additional audit failures that are not actionable
Open questions:
Should Audit be removed from PR checks as well?
Pros of having it: any new dependencies added in a PR will be checked for audits
Cons: since the weekly check is removed, a new PR could contain false positives even if they dont add any new dependencies. This would add noise to CI when reviewing PRs.
The text was updated successfully, but these errors were encountered:
This CI check is no longer needed, not even in PRs. At the risk of putting the burden back on a human instead of an automated check, new dependency PRs should hopefully not be made if the install flags an audit warning.
Open questions:
The text was updated successfully, but these errors were encountered: