https://github.com/th3s4mur41/demo-auto-security-release

How to leverage GitHub and semantic release to reduce vulnerabilities in your packages
https://github.com/th3s4mur41/demo-auto-security-release

article blog blogging demo dependabot dependencies github-actions security semantic-release vulnerabilities

Last synced: 3 months ago
JSON representation

How to leverage GitHub and semantic release to reduce vulnerabilities in your packages

• Host: GitHub
• URL: https://github.com/th3s4mur41/demo-auto-security-release
• Owner: Th3S4mur41
• License: mit
• Created: 2022-09-13T13:12:17.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2025-06-24T00:36:37.000Z (3 months ago)
• Last Synced: 2025-06-24T01:32:21.261Z (3 months ago)
• Topics: article, blog, blogging, demo, dependabot, dependencies, github-actions, security, semantic-release, vulnerabilities
• Language: Shell
• Homepage: https://medium.com/@th3s4mur41/how-to-leverage-github-and-semantic-release-to-reduce-vulnerabilities-in-your-packages-c517403e339c
• Size: 948 KB
• Stars: 3
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

          
# How to leverage GitHub and semantic release to reduce vulnerabilities in your packages

[![Open in GitHub Codespaces](https://github.com/codespaces/badge.svg)](https://github.com/codespaces/new?machine=basicLinux32gb&repo=536133020&ref=main)

![Package version](https://img.shields.io/github/package-json/v/Th3S4mur41/demo-auto-security-release)

![GitHub last commit](https://img.shields.io/github/last-commit/Th3S4mur41/demo-auto-security-release)

![Release](https://github.com/Th3S4mur41/demo-auto-security-release/actions/workflows/on_push.yml/badge.svg?branch=main)

This repository is used as reference to [an article on how to use Github features in combination with semantic release to help automatically reduce vulnerabilities in a project's dependencies](https://medium.com/@th3s4mur41/how-to-leverage-github-and-semantic-release-to-reduce-vulnerabilities-in-your-packages-c517403e339c)