{"meta":{"title":"Configuring Dependabot malware alerts","intro":"Prevent malware attacks by identifying and remediating malicious dependencies.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/how-tos","title":"How-tos"},{"href":"/en/code-security/how-tos/secure-your-supply-chain","title":"Secure your supply chain"},{"href":"/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies","title":"Secure your dependencies"},{"href":"/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-malware-alerts","title":"Configure malware alerts"}],"documentType":"article"},"body":"# Configuring Dependabot malware alerts\n\nPrevent malware attacks by identifying and remediating malicious dependencies.\n\n## Enabling Dependabot malware alerts for your repository\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under your repository name, click ** Settings**. If you cannot see the \"Settings\" tab, select the **** dropdown menu, then click **Settings**.\n\n \n3. In the \"Security\" section of the sidebar, click ** Advanced Security**.\n4. To enable Dependabot malware alerts, you first need to enable Dependabot alerts. Under \"Advanced Security\", to the right of Dependabot alerts, click **Enable**.\n5. To the right of Dependabot malware alerts, click **Enable**.\n\n## Enabling Dependabot malware alerts for your organization\n\nYou can enable Dependabot malware alerts for repositories in your organization with a custom security configuration. Security configurations are collections of security settings that you can customize and apply at scale. See [Creating a custom security configuration](/en/code-security/how-tos/secure-at-scale/configure-organization-security/establish-complete-coverage/creating-a-custom-security-configuration).\n\n## Enabling Dependabot malware alerts for your enterprise\n\nYou can enable Dependabot malware alerts for repositories in your enterprise with a custom security configuration. Security configurations are collections of security settings that you can customize and apply at scale. See [Creating a custom security configuration for your enterprise](/en/enterprise-cloud@latest/code-security/how-tos/secure-at-scale/configure-enterprise-security/establish-complete-coverage/creating-a-custom-security-configuration-for-your-enterprise).\n\n## Next steps\n\nTo view and update your Dependabot malware alerts, see [Managing Dependabot malware alerts](/en/code-security/how-tos/manage-security-alerts/manage-dependabot-alerts/manage-malware-alerts)."}