Dependabot

An attacker disables GitHub Dependabot security features to prevent automatic detection of vulnerable dependencies, potentially leading to code execution, data theft, or other compromises through the software supply chain.

An attacker disables Dependabot in a GitHub repository to prevent automatic vulnerability detection, potentially leading to exploitation of unpatched dependencies and supply chain compromise.