Free GH-500 Web TestEngine Demo

Q7 Single choice

Assuming there is no custom Dependabot behavior configured, where possible, what does Dependabot do after sending an alert about a vulnerable dependency in a repository?

A
scans repositories for vulnerable dependencies on a schedule and adds those files to a manifest
B
scans any push to all branches and generates an alert for each vulnerable repository
C
creates a pull request to upgrade the vulnerable dependency to the minimum possible secure version
D
constructs a graph of all the repository's dependencies and public dependents for the default branch

GH-500 Web TestEngine demo