chore: replace Dependabot references with Renovate (#55)
- SECURITY.md: update to mention Renovate instead of Dependabot - README.md: update supply chain table - ADR 003: update mitigation to mention Renovate Closes PRI-389. Parent PRI-387. Co-authored-by: Chris Farhood <chris@farhood.org> Co-authored-by: Paperclip <noreply@paperclip.ing>
This commit was merged in pull request #55.
This commit is contained in:
committed by
GitHub
parent
ecdee4a95a
commit
67602fb279
@@ -349,7 +349,7 @@ Added type safety:
|
||||
|
||||
**Supply Chain**:
|
||||
- Risk: Compromised node-forge dependency
|
||||
- Mitigation: Package lock, dependabot, regular audits
|
||||
- Mitigation: Package lock, Renovate, regular audits
|
||||
- Same risk as any JavaScript dependency
|
||||
|
||||
**Browser Extensions**:
|
||||
|
||||
Reference in New Issue
Block a user