Dependabot Alerts or Security Updates Disabled in GitHub

SigmaHQ Detections@sigmaHQ

•updated Nov 3, 2025•1•0•37

This rule detects when an organization owner disables Dependabot alerts for private repositories or Dependabot security updates for all repositories within GitHub. Dependabot performs scans to detect insecure dependencies and sends alerts, so disabling these features can increase an organization's exposure to vulnerabilities.