Question 031
### Which of these statements about Dependabot Alerts are true? (Choose three.)
> https://docs.github.com/en/code-security/dependabot/dependabot-alerts/about-dependabot-alerts
- [x] They partially rely on the GitHub Advisory Database
- [x] To enable Dependabot Alerts you first need to have Dependency Graph enabled on your repository
- [x] When GitHub identifies a vulnerable dependency, they generate a Dependabot alert and display it on the Security tab for the repository
- [ ] Dependabot Alerts are enabled by default for all repositories
- [ ] Dependabot Alerts are enabled by default for all public repositories
- [ ] Dependabot alerts tell you that your repository uses an outdated version of a package