What is Dependabot?

• A. A code review tool
• B. A GitHub tool that automates managing repository dependencies
• C. A container orchestration tool
• D. A security scanner for secrets

Answer: (B)

Dependabot is a GitHub feature that automates dependency maintenance. It scans your project’s libraries and packages for new versions and known security advisories, and it automatically opens pull requests to update them. It supports many programming ecosystems and helps keep your lockfiles and dependencies current, reducing the risk from vulnerable or outdated packages. It isn’t a code review tool, a container orchestration tool, or a secrets scanner—its purpose is specifically to manage and update dependencies automatically within your GitHub repository.