# GitHub Advanced Security + Dependabot: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 1 judge label across 1 category by 1 of 14 models. Page: https://www.gane.ai/index/it/vendors/github-advanced-security-dependabot

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 56 | 100% | 1 |

## And against it

- "No reachability analysis means Dependabot flags every vulnerability in every dependency, regardless of whether it's exploitable." (Claude Haiku 4.5, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 1 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named GitHub Advanced Security + Dependabot, from 1 of the 1 answers that named it (only the models that return a source list).

### Domains cited

- appsecsanta.com: 1
- arxiv.org: 1
- blog.codacy.com: 1
- checkmarx.com: 1
- cycode.com: 1
- endorlabs.com: 1
- github.com: 1
- image-ppubs.uspto.gov: 1
- jfrog.com: 1
- ox.security: 1

### Pages cited

- https://appsecsanta.com/sca-tools/what-is-sca: 1
- https://arxiv.org/pdf/2409.17844: 1
- https://blog.codacy.com/software-composition-analysis-sca: 1
- https://checkmarx.com/learn/software-composition-analysis/software-composition-analysis-sca: 1
- https://cycode.com/blog/top-enterprise-sca-tools: 1
- https://endorlabs.com/learn/best-sca-tools-05b7a: 1
- https://endorlabs.com/learn/sca-security: 1
- https://github.com/coreinfrastructure/best-practices-badge/issues/1341: 1

## What it publishes

Every page github.io exposes, read 2026-09-29: 13 addresses. By kind, pages and the last 90 days:


## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.