Dependabot Alerts
- Alerts sync hourly and show open vs resolved issues.
- Unresolved issues appear in the Security tab with direct links.
Auto-Merge Options
When auto-merge is enabled, GWM will attempt to apply Dependabot PRs automatically. Failures are recorded in the Security logs.
Required GitHub Token Scopes
Ensure GITHUB_TOKEN includes repo and security_events.
