# Securing your dependencies

Keep your supply chain secure by understanding and updating dependencies.

## Links

* [Configuring Dependabot alerts](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-dependabot-alerts)

  Enable Dependabot alerts to be generated when a new vulnerable dependency is found in one of your repositories.

* [Configuring Dependabot malware alerts](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-malware-alerts)

  Prevent malware attacks by identifying and remediating malicious dependencies.

* [Configuring Dependabot security updates](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-security-updates)

  You can use Dependabot security updates or manual pull requests to easily update vulnerable dependencies.

* [Configuring Dependabot version updates](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-version-updates)

  You can configure your repository so that Dependabot automatically updates the packages you use.

* [/manage-innersource-advisories](/en/enterprise-server@3.22/manage-innersource-advisories)

* [Keeping your actions up to date with Dependabot](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/auto-update-actions)

  You can use Dependabot to keep the actions you use updated to the latest versions.

* [Configuring multi-ecosystem updates for Dependabot](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configuring-multi-ecosystem-updates)

  Reduce the number of Dependabot pull requests you receive by grouping updates across multiple ecosystems into a single, consolidated pull request.

* [Enabling the dependency graph](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/enable-dependency-graph)

  You can allow users to identify their projects' dependencies by enabling the dependency graph.

* [Exploring the dependencies of a repository](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/explore-dependencies)

  You can use the dependency graph to see the packages your project depends on. In addition, you can see any vulnerabilities detected in its dependencies.

* [/submit-dependencies-automatically](/en/enterprise-server@3.22/submit-dependencies-automatically)

* [Using the dependency submission API](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/use-dependency-submission-api)

  You can use the dependency submission API to submit dependencies for projects, such as the dependencies resolved when a project is built or compiled.

* [Verifying the integrity of a release](/en/enterprise-server@3.22/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/verify-release-integrity)

  You can avoid tampering and accidental changes by ensuring the releases you use have not been modified after publication.