Import Dependabot data

Dependabot is a GitHub service that provides vulnerability analysis of your software dependencies. You can import Dependabot findings into New Relic to achieve a single, unified view of vulnerabilities.

After completion of these steps, you will see new vulnerabilities detected by Dependabot in your New Relic account in real time and will be able to build out analytics dashboards and enable alertas on newly detected issues.

Importing Dependabot data consists of two steps:

• Send newly detected vulnerabilities in realtime to New Relic with a webhook
• A one time import of previously detected vulnerabilities through a bulk import

We recommend combining your webhook with a one-time bulk import to ensure data integrity of historical vulnerabilities.