test: only surface production dependency vulnerabilities, not dev dep…

…endency vulnerabilities I have no idea why this isn't the default, here are some threads on the issues: dependabot/dependabot-core#4146 dependabot/dependabot-core#2521 facebook/create-react-app#11174
tilt-dev · Dec 17, 2021 · 2ca73d6 · 2ca73d6
1 parent a30233c
commit 2ca73d6
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/**"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "production"
+  - package-ecosystem: "gomod"
+    directory: "/**"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "production"