From d2329f8cba661999cc7f03fcd6c0196770b05cdc Mon Sep 17 00:00:00 2001 From: Naveen <172697+naveensrinivasan@users.noreply.github.com> Date: Mon, 18 Apr 2022 11:00:08 -0500 Subject: [PATCH] chore: Included githubactions for dependabot (#6080) This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 52796d11900..65f8104c44f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,3 +21,13 @@ updates: labels: - "PR: chore" - "PR: dependencies" + - package-ecosystem: "github-actions" # See documentation for possible values + directory: "/" + target-branch: "develop" + schedule: + interval: "weekly" + commit-message: + prefix: "chore(deps)" + labels: + - "PR: chore" + - "PR: dependencies"