[ypeter]

No, Dependabot scans your repo on dependencies that have known vulnerabilities and suggests to update those dependencies.

This new GitHub feature will scan your code on potential vulnerabilities like SQL injection.

[greysteil]

Wow, jinx, this is pretty much identical to the answer I just wrote!