Commit a9b4487
committed
Create dependabot.yaml
This PR adds a Dependabot configuration (dependabot.yml) to automatically keep GitHub Actions up to date. Enabling Dependabot helps ensure the repository remains secure, follows best practices, and stays aligned with Qualcomm engineering standards.
Key details:
Enables Dependabot for the GitHub Actions ecosystem
Scans the root directory (/) where workflows are located
Schedules checks to run daily
Automates version update PRs for workflow dependencies
This improves repository maintainability and helps proactively identify outdated or vulnerable GitHub Actions.
Signed-off-by: Sandhya Adavikolanu <sadaviko@qti.qualcomm.com>
Signed-off-by: Sandhya Adavikolanu <sadaviko@qti.qualcomm.com>1 parent 8969a32 commit a9b4487
1 file changed
Lines changed: 11 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
0 commit comments