Skip to content

Commit d09b198

Browse files
authored
Keep GitHub Actions up to date with GitHub's Dependabot (#33)
* [Keeping your software supply chain secure with Dependabot](https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain) * [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/keeping-your-actions-up-to-date-with-dependabot) * [Configuration options for the `dependabot.yml` file - package-ecosystem](https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#package-ecosystem-) To see all GitHub Actions dependencies, type: % `git grep 'uses: ' .github/workflows/` ``` .github/workflows/pre-commit.yaml: - uses: actions/checkout@v5 .github/workflows/pre-commit.yaml: - uses: j178/prek-action@v1 .github/workflows/sdk-adr.yaml: - uses: actions/checkout@v4 .github/workflows/sdk-adr.yaml: uses: astral-sh/setup-uv@v6 .github/workflows/sdk-adr.yaml: uses: actions/setup-python@v5 .github/workflows/sdk-adr.yaml: uses: actions/checkout@v4 .github/workflows/sdk-adr.yaml: uses: actions/setup-go@v5 ```
1 parent ac034f4 commit d09b198

1 file changed

Lines changed: 13 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
# Keep GitHub Actions up to date with GitHub's Dependabot...
2+
# https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/keeping-your-actions-up-to-date-with-dependabot
3+
# https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#package-ecosystem
4+
version: 2
5+
updates:
6+
- package-ecosystem: github-actions
7+
directory: /
8+
groups:
9+
github-actions:
10+
patterns:
11+
- "*" # Group all Actions updates into a single larger pull request
12+
schedule:
13+
interval: weekly

0 commit comments

Comments
 (0)