I passed SOC2 with dependabot set to only perform security updates | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		gregwebs 3 months ago \| parent \| context \| favorite \| on: Weaponizing Dependabot: Pwn Request at its finest I passed SOC2 with dependabot set to only perform security updates

latchkey 3 months ago [–]

Yes, that is about all you need on it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact