Config file for pyup.io

[pyup-bot]

Hi there and thanks for using pyup.io!

Since you are using a non-default config I've created one for you.

There are a lot of things you can configure on top of that, so make sure to check out the docs to see what I can do for you.

[chadwhitacre]

How does @pyup-bot have permission to create a branch in our repo?

[chadwhitacre]

@EdOverflow Is it using your oauth?

[chadwhitacre]

I'm also not convinced that this is going to work with tarballs in vendor vs. remote.

[EdOverflow]

Is it using your oauth?

Yep. I will revoke access to this repo and figure out an alternative.

[chadwhitacre]

slack

Related links re: security and other considerations with services like this:

• Your “just” considered harmful—"someone created a GitHub account called “greenkeeperlo-bot”, which is the spitting image of our account “greenkeeperio-bot”, to send out spammy pull requests in our name."
• Security risks that come with highly automated systems
• Maybe Automatically Updating Dependencies Isn’t a Great Idea