Skip to content

Commit

Permalink
Included githubactions in the dependabot config (#8104)
Browse files Browse the repository at this point in the history
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
  • Loading branch information
nathannaveen authored Apr 3, 2022
1 parent be1d9d3 commit 2fe5332
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,9 @@ updates:
update-types: ["version-update:semver-major"]
- dependency-name: sinon
update-types: ["version-update:semver-major"]
- package-ecosystem: "github-actions"
directory: "/"
open-pull-requests-limit: 999
rebase-strategy: disabled
schedule:
interval: weekly

0 comments on commit 2fe5332

Please sign in to comment.