Dependency review vs Dependabot alerts vs code scanning alerts: what acts when
This sheet compares Dependency review action, Dependabot alerts, Code scanning alerts.
| Criterion | Dependency review action | Dependabot alerts | Code scanning alerts |
|---|---|---|---|
| When it acts | Pull request time, before merge | Continuously on the default branch | On pushes and on PR diff lines |
The verdict, the full comparison, 6 rules and 4 traps are part of GH-500 access. Unlock GH-500.