EPSS Scores for Dependabot Alerts [GA]

[glider-bot]

Value Prop

EPSS (Exploit Prediction Scoring System) is a data-driven framework that estimates the likelihood of a software vulnerability being exploited in the wild. It helps organizations prioritize patching efforts based on real-world risk.

Expected Outcome

With EPSS scores in Dependabot alerts, customers can expect a new way to prioritize their Dependabot updates based on likelihood of exploitation via EPSS score.

[ankneis]

🚢 This has shipped: https://github.blog/changelog/2025-02-19-dependabot-helps-users-focus-on-the-most-important-alerts-by-including-epss-scores-that-indicate-likelihood-of-exploitation-now-generally-available

Leaving open to track for GHES release!

[ankneis]

This has fully shipped with the GHES 3.17 release: https://docs.github.com/en/enterprise-server@3.17/admin/release-notes