Question
Which of the following benefits do code scanning, secret scanning, and dependency review provide?
- A. Automatically raise pull requests, which reduces your exposure to older versions of dependencies.
- B. View alerts about dependencies that are known to contain security vulnerabilities.
- C. Search for potential security vulnerabilities, detect secrets, and show the full impact of changes to dependencies. Correct
- D. Confidentially report security vulnerabilities and privately discuss and fix security vulnerabilities in your repository’s code.
Explanation
Code scanning searches for potential security vulnerabilities and coding errors, secret scanning detects secrets such as keys and tokens, and dependency review shows the full impact of dependency changes before a pull request is merged. Together these match the third option. Automatically raising pull requests to update dependencies is what Dependabot does, and alerts about vulnerable dependencies are Dependabot alerts. Confidentially reporting and privately fixing vulnerabilities is the role of security advisories.
