-
Notifications
You must be signed in to change notification settings - Fork 151
Generate fake proj for dependabot #1336
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
@@ -0,0 +1,7 @@ | |||
version: 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Silly question, is it okay that it's not config.yml
? I don't know how sensitive the tooling is to the extension
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not a silly question, just an oversight on my part, thanks.
I don't know if it would work or not actually.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
|
||
<PropertyGroup> | ||
<TargetFrameworks>netcoreapp3.1</TargetFrameworks> | ||
<RootNamespace>Datadog.Dependabot.Honeypot</RootNamespace> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why Honeypot
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It seemed like an apt name.
https://en.wikipedia.org/wiki/Honeypot_(computing)
It's not an attacker, but it isn't a REAL project: It's a fake project designed to attract the dependabot.
🍯 🐝 🐝 🐝
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
designed to attract the dependabot.
Ah, I didn't think of it that way. Thanks.
Allows us to use dependabot for vendored dependencies.
🍯 🐝 🐝 🐝
@DataDog/apm-dotnet