Partially Verified65% confidenceFactExact time

GitHub的Dependabot工具基于GitHub Advisory Database自动检测已知漏洞，并创建Pull Request更新存在风险的依赖版本

3

Sources

65%

Confidence

Long-term

Relevance

5/20/2026

First Seen

Sources

GitHub内部仓库遭未授权访问事件详解：影响范围与安全建议

rss5/20/2026

Related Entities

Dependabotproduct GitHub Advisory Databaseproduct GitHubcompany

Related Claims

VerifiedGitHub等平台已内置了Secret Scanning功能，能自动检测代码中意外提交的API Key并发出警告79% similar UnverifiedGitHub 渠道通过监听 Webhook 事件（如 Pull Request、Issue 评论、代码推送）实现异步的、事件驱动的自动化74% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/6991

API

curl https://kongchang.com/api/v1/knowledge/claims/6991

MCP

get_claim(id=6991)