Problem
Developers dont know how to resolve dependencies easy.
Proposed solution
Create a Bot same github dependabo to create PR with vulnerability and solution
Alternatives considered
Renovate
Review and implement our own solution but not only in scheduler, we want shedule(Configurable by org) and when event CI code report run.
Scope
Additional context
We need implement configuration view to bot to manage schedule, configurate permissions to repositories in organization, and enable option on schedule or on event when code report analsys run.
This is organization configuration and activable in project. in project require confirm repository
Problem
Developers dont know how to resolve dependencies easy.
Proposed solution
Create a Bot same github dependabo to create PR with vulnerability and solution
Alternatives considered
Renovate
Review and implement our own solution but not only in scheduler, we want shedule(Configurable by org) and when event CI code report run.
Scope
Additional context
We need implement configuration view to bot to manage schedule, configurate permissions to repositories in organization, and enable option on schedule or on event when code report analsys run.
This is organization configuration and activable in project. in project require confirm repository