Skip to content

Commit eea7ccb

Browse files
committed
Configure Dependabot to check for outdated actions used in workflows
The addition of this configuration file will cause Dependabot to periodically check the versions of the GitHub Actions actions dependencies of the repository's workflows. If any are found to be outdated, it will submit a pull request to update them.
1 parent a296428 commit eea7ccb

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

.github/dependabot.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# See: https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#about-the-dependabotyml-file
2+
version: 2
3+
4+
updates:
5+
# Configure check for outdated GitHub Actions actions in workflows.
6+
# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/dependabot/README.md
7+
# See: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot
8+
- package-ecosystem: github-actions
9+
directory: /.github/workflows/
10+
assignees:
11+
- per1234
12+
labels:
13+
- "topic: infrastructure"
14+
open-pull-requests-limit: 100
15+
schedule:
16+
interval: daily

0 commit comments

Comments
 (0)