project
GitHub's built-in bot that scans repositories for outdated or vulnerable dependencies, flags security alerts, and opens pull requests to update them.
No evidence-backed relationships are recorded.
SHA pinning drew a clean line through the tj-actions compromise, and then Dependabot began bumping hashes faster than anyone could read them. The claim worth enforcing is the version comment that nothing verifies.
Reality
A reproducible two-commit diff counted eight operations removed from GitHub's OpenAPI spec in six months, ten newly flagged across OpenAI's /videos surface in ten weeks, and nothing removed or flagged at Stripe.
Reality
GitHub's workflow execution protections went generally available on September 17, and the evaluate mode that shows what a rule would block before enforcement is documented as an Enterprise Cloud capability.
Reality
Tool text is fetched from the server every time an agent connects, so the description reviewed at install time can differ from the one the model reads next week. A dev.to post proposes pinning a hash of it and checking that hash in CI.
Reality
The watchdog's own death and its one true alert both surface as step 6 failing, so three nights of verifying nothing look identical to the night it caught a daily cron that had been dead for 70.4 days.
Reality
Upgrading a Node 26 binary also upgrades the TLS library, the bundled HTTP client and the package manager. The 26.8.2 changelog names OpenSSL 3.5.8, undici 8.10.2 and npm 11.19.1 among its dependency commits.
Reality
Pinning a workflow to a commit SHA stops the tag moving under you, and resolving all 31 from the upstream repositories turned up an action whose v3 tag stopped moving at all while its releases reached v5.0.0.
Reality
The PAT in dependabot.yml can finally come out, but only after an admin adds the repository to the package's Manage Actions access list, and GitHub keeps the old credential working, leaving half-done migrations indistinguishable from finished ones.
Reality
A team pushing 70 to 100 pull requests a week reports a 30 to 40 percent first-pass catch rate across 4,200 PRs. The parts that travel are the file-level chunk boundary and the draft gate; the percentage stays with the stack.
Reality
The endpoint keeps returning 200 with valid JSON, so release tooling reads an absent field and carries on. Pinning the version header defers that work rather than removing it, and the deferral has a date on it.
Reality
The engineer running Dependabot across 30 million repositories says wiring in OpenSSF's malicious-package feed was the cheap part, while normalization ate the budget and each alert ends in a build-credential incident.
Reality
A TypeScript monorepo accumulated eight glob versions, seven of minimatch and three of brace-expansion, and the dozens of GitHub alerts they raised over twelve months were mostly ReDoS the code could not reach.
Reality
A developer spent a week on an agent that bumps vulnerable dependencies and repairs the breakage, and the repairs were the easy part; his log of how each failure reported success while being wrong is the useful artifact.
Reality
Sysdig logged a pre-auth SQL injection probe against CVE-2026-42208 from an operator who already had the Prisma schema casing right, which is the argument for putting LLM gateways on the same patch clock as edge appliances.
Reality
JFrog found that 54 of 55 advisories from one new GitHub account were machine-generated fiction. They reached enterprise scanners by the normal route, which is the problem.
Reality
Slopsquatting stopped being a thought experiment. The only thing standing between an AI suggestion and an install was a reviewer who happened to check the registry page.
Reality
A dev.to post reports dependency-bump merges going red after Renovate was added to a Gradle project. The cause sits in the checksum records, and the .module file is easy to miss.
Reality
GitHub now sells Advanced Security as two SKUs, at $19 and $30 per active committer per month. Neither one routes a finding to an owner or enforces a deadline.
Reality
A backdoored LiteLLM build was downloaded about 47,000 times in a three-hour window. Most agent incidents never get a CVE, so your scanner dashboard is not the control you think it is.
Reality