Bringing supply chain security features to the Go community

Re:Bringing supply chain security features to the Go community by greysteil on Friday July 23, 2021 @09:17AM (#27930299)

Feature requests always welcome! I'll pass it on to the Dependabot team.

[ Parent | on HN ]

Re:Bringing supply chain security features to the Go community by plasma on Friday July 23, 2021 @08:17PM (#27937242)

Thank you

[ Parent | on HN ]

Re:Bringing supply chain security features to the Go community by asciimike on Monday July 26, 2021 @01:05PM (#27961965)

Let me know if https://github.com/github/roadmap/issues/148 is in the right spirit of what you're aiming for.

I think that what will get implemented will be a bit broader (covering version updates and security updates) and will allow for grouping by manifest, language, vulnerability, and potentially arbitrary labeling in the config file.

[ Parent | on HN ]

Re:Bringing supply chain security features to the Go community by plasma on Wednesday July 28, 2021 @08:46AM (#27983079)

Yep, that looks good to me, thanks!

[ Parent | on HN ]