Add "Dependency Graph" hub #1381
rhyskoedijk
started this conversation in
Ideas
Replies: 1 comment
-
Yes! This would be great! Essentially a step towards having a UI |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
@mburumaxwell, something I've been looking in to for a while since the "vNext" script is the idea of storing the Dependabot dependency list data in so it can be displayed in a DevOps hub; The hub would allow you to export a dependency graph across the organisation, project, or repository as either a CSV file or maybe in one of the well-known SBOM formats.
The purpose of the hub would be to allow users to track and export their dependency graph from a centralised location, or export it as file to stakeholders. There are many paid products that do this (including GitHub Advanced Security for DevOps), but I'd like to see a free option since Dependabot is free and is already capable of solving this specific problem.
Below is a very basic prototype I did using the output from the new dependabot@2 task, which stores the dependency list data against the DevOps project properties (when configured to do so):
Would you be open to accepting something like this if I was to finish it? Any concerns or suggestions?
I would still need to finish V2 + unit tests first, this would come after that.
Beta Was this translation helpful? Give feedback.
All reactions