Hi all,

Looks like GitHub now adds a new "Security Alert" feature
<https://help.github.com/articles/viewing-and-updating-vulnerable-dependencies-in-your-repository/>
for tracking dependency CVEs, unfortunately I couldn't find it in Airflow
repo. <https://github.com/apache/incubator-airflow/pulse> So if it makes
sense to the community, could Airflow repo admin (assume it means PMC
members ;p) help to enable the alert feature and make it publicly
available?

Happy to take a stab myself if I have the access permission.
Thanks.

Feng

Reply via email to