Dependabot helps when fixes are available and/or if your automation and test coverage is strong. Context from what’s running can help focus your efforts when mo

Dependabot helps when fixes are available and/or if your automation and test coverage is strong. Context from what’s running can help focus your efforts when more investigation is required, if the CVE is tricky or fixes need to be tracked and rolled out across a lot of teams. You'll see a lot of CVEs marked "won't fix" for example.