Skip to content

Dependabot alerts on inactive repos on github.com move to cold storage [GA] #1350

Open

Description

@github-product-ops

Value Prop

Dependabot continues to stay on top of security vulnerabilities in your repositories, even as our alert volume grows. When your repository hasn't received any commits in a year, we automatically move your alerts to storage that's optimized for historical records—keeping Dependabot responsive for active projects while preserving your security history if you need to review it.

Expected Outcome

This change ensures Dependabot can continue issuing alerts at scale without outgrowing our infrastructure. By archiving alerts for inactive repositories, we free up resources to keep security scanning fast and reliable for repositories that are actively maintained, which is where developers need real-time insights most.

Activity

  1. added
    cloudAvailable on Cloud
    GAFeature phase: Generally available
    EnterpriseProduct SKU: GitHub Enterprise
    FreeProduct SKU: GitHub Free
    TeamProduct SKU: GitHub Team
    on Nov 5, 2026
  2. locked and limited conversation to collaborators on Nov 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    EnterpriseProduct SKU: GitHub EnterpriseFreeProduct SKU: GitHub FreeGAFeature phase: Generally availableGitHub Advanced Security (GHAS)Product SKU: GitHub Advanced SecurityTeamProduct SKU: GitHub TeamcloudAvailable on Cloud

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions