From a898d87b7995b15b35d4db7511ae5372b98cf63f Mon Sep 17 00:00:00 2001 From: Christian Marangi Date: Fri, 12 Apr 2024 15:16:53 +0200 Subject: [PATCH] CI: add dependabot scan Add dependabot scan to warn and propose updates to our github actions. Signed-off-by: Christian Marangi --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..41039d6 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +# Set update schedule for GitHub Actions + +version: 2 +updates: + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + # Check for updates to GitHub Actions every week + interval: "weekly" + # Prefix all commit messages with "CI" plus its scope, that is, a + # list of updated dependencies + commit-message: + prefix: "CI" + include: "scope" -- 2.30.2