#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
Turn Dependabot Off
·
Filippo Valsorda
·
Feb. 20, 2026, 9 p.m.
GitHub Actions
Dependabot
dependency management
ci/cd
Summary
The post suggests turning off Dependabot in favor of using scheduled GitHub Actions to run vulnerability checks and continuous integration on the latest dependencies, emphasizing a potentially more effective approach to dependency management.
Read full post on words.filippo.io →
MORE POSTS LIKE THIS
# The CI/CD Pipeline That Was Lying to Us: A Deploy Debugging Story
Vicente G. Reyes ·
Sep 1, 2026
DevOps
Docker
Thoughts on the Buildkite Aug 25 incident
Surfingcomplexity ·
Sep 2, 2026
incidents
Buildkite
A deep dive into GitHub Actions
Flaviocopes ·
Aug 27, 2026
GitHub Actions
ci/cd
Docker OIDC connections for GitHub Actions available for Docker Orgs
Hub Docker ·
Jul 31, 2026
Security
products
github: GitHub Actions holds potentially malicious workflows for approval
Sujith Quintelier ·
Jul 29, 2026
github
GitHub Actions
Push images to Quay without a password
Red Hat ·
Jul 22, 2026
openid connect
GitHub Actions
Discover more posts →
AUTHOR
Sponsored
Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →
BLOG POST FEATURED ON
Hacker News
639 points
r/golang
141 points
r/programming
115 points
r/hackernews
3 points
r/hypeurls
1 points
Add this plugin to your blog
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google