# GitHub Dependabot

> Automatically scan dependencies for vulnerabilities and create pull requests to keep them updated

- **Canonical URI:** https://www.vioscale.ai/software/github-dependabot
- **Category:** Dependency Management
- **Homepage:** https://github.com/features/security/software-supply-chain
- **Also known as:** github-dependabot
- **Profile claimed by vendor:** no
- **Last updated:** 2026-08-25T08:42:45.689Z

## Vioscale score

**65.9 / 100**, confidence 76% (high). Computed 2026-09-01. _(updating — computed under an earlier model version or past its freshness window.)_

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 100 | 0.052 | 5.2 | ✓ |
| reliability | 50 | 0.073 | 3.7 | ✓ |
| capabilities | 86.7 | 0.04877777777777778 | 4.2 | ✓ |
| integrations | 34.6 | 0.04066666666666666 | 1.4 | ✓ |
| security_posture | 45 | 0.073 | 3.3 | ✓ |
| pricing_transparency | 80 | 0.084 | 6.7 | ✓ |

## Pricing

_As of 2026-08-25, [verify at source](https://github.com/pricing). Independently observed._

Free · Free tier · 30-day trial

> Free for public repositories; included in paid GitHub plans

| Plan | Price | Free | Commitment |
|---|---|:--:|---|
| Free | Free | ✓ | - |
| Enterprise Cloud | Contact sales | - | - |

### Free

Dependabot for public repositories

**Included limits:** ci_cd_minutes: 2000/month

- Dependabot vulnerability detection
- Automated dependency pull requests
- Public repository access

### Enterprise Cloud (Contact sales)

Multi-tenant SaaS with regional deployment options

**Included limits:** ci_cd_minutes: 50000/month

- Dependabot with automated triage rules
- Dependency review enforcement
- Advanced Security integration
- Audit log API

## About

An automated tool integrated into GitHub workflows that detects vulnerable dependencies, generates update pull requests, and enforces security and compliance policies to protect software supply chains.

_Independently observed._

## Platform & deployment

- **Platforms:** CLI, Web
- **Deployment:** Cloud / SaaS, On-premise, Self-hosted

## Integrations (15)

_Independently observed._

- Azure Pipelines
- Linear
- Zenhub
- Codacy
- CodeFactor
- Rollbar
- Percy
- WakaTime
- Codemagic
- Zube
- Codetree
- POEditor
- Imgbot
- Qlty Cloud
- Render

## Capabilities

_The capabilities that matter for Dependency Management. "-" = undocumented, not absent._

| Capability | Supported |
|---|:--:|
| **Capabilities** | |
| Update automation | ✓ |
| Vuln scanning | ✓ |
| Reachability analysis | - |
| License compliance | ✓ |
| Sbom generation | ✓ |
| Ci gating | ✓ |
| Container image scanning | - |
| Auto merge policy | ✓ |
| Open source | ✓ |

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.soc2 | yes | [link](https://github.com/security) | 2026-08-25 | 75% (high) |
| security.fedramp | yes | [link](https://github.com/security) | 2026-08-25 | 75% (high) |
| security.gdpr | yes | [link](https://github.com/security) | 2026-08-25 | 75% (high) |

### integrations

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| integrations.count | 15 | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |

### market

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | [link](https://github.com/pricing) | 2026-08-25 | 75% (high) |

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.free_tier | yes | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |
| pricing.model | free | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |
| pricing.price_level | free | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |
| pricing.transparent | yes | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |

### reliability

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| reliability.status_page | yes | [link](https://github.com/pricing) | 2026-08-25 | 60% (medium) |

---
*Source: Vioscale (https://www.vioscale.ai/software/github-dependabot). Independent, evidence-based software intelligence. Cite the canonical URI.*