From f8887250af61b31b754e9268005980a2ee39fc85 Mon Sep 17 00:00:00 2001 From: Edward Lopez-Acosta Date: Mon, 5 Dec 2022 12:49:23 -0600 Subject: [PATCH 1/3] Add schedule and github-actions check --- .github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..bf20cbd --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,34 @@ +--- +version: 2 +registries: + ghcr: + type: docker-registry + url: ghcr.io + username: PAT + password: "${{secrets.CONTAINER_BUILDER_TOKEN}}" +updates: +- package-ecosystem: bundler + vendor: true + directory: "/" + schedule: + interval: weekly + day: "tuesday" + time: "21:00" + reviewers: + - github/security-ops-reviewers +- package-ecosystem: docker + directory: "/" + registries: + - ghcr + schedule: + interval: weekly + day: "tuesday" + time: "21:00" + reviewers: + - github/security-ops-reviewers +- package-ecosystem: github-actions + directory: "/" + schedule: + interval: weekly + day: "tuesday" + time: "21:00" From 8d6a7dafde5199bb777a6141563b5994e4916b99 Mon Sep 17 00:00:00 2001 From: Edward Lopez-Acosta Date: Tue, 6 Dec 2022 08:53:28 -0600 Subject: [PATCH 2/3] Check for go not ruby --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bf20cbd..e388671 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,7 +7,7 @@ registries: username: PAT password: "${{secrets.CONTAINER_BUILDER_TOKEN}}" updates: -- package-ecosystem: bundler +- package-ecosystem: gomod vendor: true directory: "/" schedule: From 8e4286456c9674d84dd1afd7dd26c488bb48cd01 Mon Sep 17 00:00:00 2001 From: Edward Lopez-Acosta Date: Tue, 6 Dec 2022 08:54:07 -0600 Subject: [PATCH 3/3] Don't vendor gomod --- .github/dependabot.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e388671..1478f00 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,7 +8,6 @@ registries: password: "${{secrets.CONTAINER_BUILDER_TOKEN}}" updates: - package-ecosystem: gomod - vendor: true directory: "/" schedule: interval: weekly