You manage code by using GitHub.
You need to ensure that repository owners are notified if a new vulnerable dependency or malware is found in their repository.
What should you do?
Configure branch protection rules for each repository.
Configure Dependabot alerts.
Configure CodeQL scanning actions.
Subscribe all the repository owners to the GitHub Advisory Database.
Submit