Skip to content

Commit

Permalink
Enable Dependabot for Wwrokflow updates
Browse files Browse the repository at this point in the history
We want to be notified if

- used GitHub actions and
- used baes images in the workflow

are outdated.

We are not sure if it will work. This is a first try.

The docker ecosystem is configured globaly because we may use
containers outside workflows and we hope that Dependabot searches
recursive. We are also not sure if Dependabot recognizes the image
tag in the workflow YAML as Docker dependency.

Signed-off-by: Sven Strittmatter <[email protected]>
  • Loading branch information
Weltraumschaf committed Jul 28, 2023
1 parent a50f3ff commit fc0a37f
Showing 1 changed file with 11 additions and 3 deletions.
14 changes: 11 additions & 3 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,15 @@

version: 2
updates:
- package-ecosystem: "gradle" # See documentation for possible values
directory: "/" # Location of package manifests
- package-ecosystem: "gradle"
directory: "/"
schedule:
interval: "weekly"
interval: "weekly"
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "weekly"
- package-ecosystem: "github-actions"
directory: "/.github/workflows"
schedule:
interval: "weekly"

0 comments on commit fc0a37f

Please sign in to comment.