[rudian]

Disable it. If you don’t want to, limit it to weekly or monthly. I agree that Dependabot is super noisy especially by default.

[whymarrh]

Yup, there's quite a few different configuration options available: https://docs.github.com/en/code-security/supply-chain-securi...