Wrote an article
https://scotch.io/bar-talk/secure-dependencies-with-github-and-dependabot