Skip to content

[BUG] dependency_security does not consider renovate for package update schedules #316

@dbasunag

Description

@dbasunag

Bug Description

dependency_security does not consider renovate for package update schedules. A repo can have renovate.json or package.json for dependencies updates

To Reproduce

Steps to reproduce the behavior:

  1. Run asses against a repo with renovate configured and see the dependency_security failing the dependency check:
dependency_security                 ❌ FAIL         Security tools configured: detect-secrets, gitl...

Expected Behavior

It should get 30 points for dependency configuration.

A clear and concise description of what you expected to happen.

Actual Behavior

A clear and concise description of what actually happened.

Environment

  • OS: macOS 26.2
  • Version: [e.g. 1.0.0]
  • Python Version: 3.14

Additional Context

Add any other context about the problem here. Include screenshots if applicable.

Possible Solution

If you have suggestions on how to fix the bug, please describe them here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions