Source: https://atomic-works-test.docs-staging.pageloop.ai/monitors/code-and-repository-monitors/how-to-resolve-sprinto-check-for-enabling-dependabot-vulnerability-scan

# How To Resolve Sprinto Check For Enabling Dependabot Vulnerability Scan

# How to resolve Sprinto check for enabling Dependabot vulnerability scan

### About

Procedure: Dependabot vulnerability scan should be enabled

Enabling Dependabot vulnerability scans on your GitHub repositories is crucial to identifying and addressing potential security vulnerabilities in your project dependencies. Dependabot helps keep your dependencies up-to-date, ensuring a more secure and reliable codebase.

### Purpose

This procedure guides you through the steps to enable Dependabot Alerts and Dependabot Security updates on your GitHub repositories. This proactive approach to dependency management helps in identifying and fixing vulnerabilities promptly.

### How to Implement

Follow these steps to enable Dependabot vulnerability scans:

### Video guide

#### Step-by-Step Guide

1. Go to[ GitHub](https://github.com/) and log in using your credentials.
2.  Click on the repository you want to enable Dependabot for. This is typically your production repository.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72080437318/original/hZF5SL5wpQltpnybjCJOc9WmkNEQqYxkxw.png?1704709452" alt="" width="563"><figcaption></figcaption></figure>
3.  Click on the Settings tab of your repository.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72080437317/original/FHtseGIyjEitIZo9m9rSbd8F-v1Gq_3WoQ.png?1704709452" alt="" width="563"><figcaption></figcaption></figure>
4.  In the settings menu, find and click Code Security and analysis.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72080437338/original/2douKBte9D6n8j92hOuiJrwTCxohnOTeZA.png?1704709463" alt="" width="563"><figcaption></figcaption></figure>
5.  Find the option to enable Dependabot Alerts and click on Enable.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72080437367/original/V1HrZT-xIp8pETdbgPlmONN_eVi-uLUfjg.png?1704709476" alt="" width="563"><figcaption></figcaption></figure>
6.  Similarly, locate the option for Dependabot Security updates and click on Enable.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72080437379/original/7G_GlCJXl2d6HZ4D0vV_gS9NBZmrkpsROA.png?1704709495" alt="" width="563"><figcaption></figcaption></figure>
7. If you have multiple production repositories, repeat steps 2 to 6 for each one.
8. After enabling Dependabot, regularly check and fix any vulnerabilities found by Dependabot in your repositories.

That's it! Following these steps, you have successfully enabled Dependabot vulnerability scans on your GitHub repositories. Sprinto retrieves the changes and sets the check status to "Passing.”

If you need any assistance with the check, please get in touch with [Sprinto support](mailto:www.support@Sprinto.com).