Configure whitesource.

[dblock]

Description

Not sure what happened in #1, I think it was closed because of a force push to main for the initial commit.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[dbwiddis]

Recommend configuring this to use Remediate in preference to dependabot.

See https:/opensearch-project/opensearch-ai-flow-framework/pull/1/files

  "remediateSettings": {
    "workflowRules": {
      "enabled": true
    }
  }

[dblock]

I copied the contents of that .whitesource. Am I doing it right?

[dbwiddis]

I copied the contents of that .whitesource. Am I doing it right?

Yes, I believe so.

To be clear, this is a choice of which dependency manager we use. I prefer Remediate to Dependabot so if we merge this PR we should close #5. And vice versa. See https:/opensearch-project/.github/blob/main/RESPONSIBILITIES.md#keep-dependencies-up-to-date for a discussion of the options before we pick one.

[dbwiddis]

Alternately it looks like for python there's another option: https://docs.safetycli.com/safety-2/

[dblock]

Alternately it looks like for python there's another option: https://docs.safetycli.com/safety-2/

I'd rather not introduce new tools unless you feel very motivated ;)

[dbwiddis]

If you're happy with Renovate, let's merge this and close #5.