r3pek/log4j-affected-db
1
0
Fork 0
mirror of https://github.com/cisagov/log4j-affected-db.git synced 2024-11-18 23:07:54 +00:00
Code Releases Activity
log4j-affected-db/.github/dependabot.yml

29 lines
774 B
YAML
Raw Normal View History

Enable weekly dependabot scans of github-actions and pip
2020-10-07 16:43:54 +00:00
---
Add comment to Dependabot configuration This comment explains that the configuration may have commented out ignore directives that should be uncommented in downstream projects.
2022-02-25 13:26:08 +00:00
# Any ignore directives should be uncommented in downstream projects to disable
# Dependabot updates for the given dependency. Downstream projects will get
# these updates when the pull request(s) in the appropriate skeleton are merged
# and Lineage processes these changes.
Enable weekly dependabot scans of github-actions and pip
2020-10-07 16:43:54 +00:00
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
Add Dependabot ignore directives This adds commented out ignore directives for the following GitHub Actions: - action/cache - action/checkout - action/setup-python These should be uncommented downstream to ensure that updates to these dependencies are pushed from pull requests made in the skeleton.
2022-03-28 20:26:36 +00:00
# ignore:
Add an ownership comment to the Dependabot configuration Add a comment that states that the commented out ignore directives are managed by cisagov/skeleton-generic.
2022-05-27 21:30:33 +00:00
# # Managed by cisagov/skeleton-generic
Add Dependabot ignore directives This adds commented out ignore directives for the following GitHub Actions: - action/cache - action/checkout - action/setup-python These should be uncommented downstream to ensure that updates to these dependencies are pushed from pull requests made in the skeleton.
2022-03-28 20:26:36 +00:00
# - dependency-name: actions/cache
# - dependency-name: actions/checkout
# - dependency-name: actions/setup-python
Enable weekly dependabot scans of github-actions and pip
2020-10-07 16:43:54 +00:00
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "weekly"
Add dependabot configuration for Terraform This will configure `dependabot` to scan Terraform configurations if they exist in a repository. If a repository stores a Terraform configuration in a sub- directory this configuration will need to be modified or an additional configuration must be added if there still exists a Terraform configuration in the root directory.
2021-10-08 16:19:14 +00:00
- package-ecosystem: "terraform"
directory: "/"
schedule:
interval: "weekly"
Copy permalink