Skip to content

Commit aa3e317

Browse files
chore: add dependabot file for project (#627)
1 parent 6a4587c commit aa3e317

File tree

1 file changed

+51
-0
lines changed

1 file changed

+51
-0
lines changed

.github/dependabot.yml

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
# .github/dependabot.yml
2+
version: 2
3+
updates:
4+
# Enable version updates for npm/yarn (JavaScript/TypeScript dependencies)
5+
- package-ecosystem: "npm"
6+
directory: "/"
7+
schedule:
8+
interval: "weekly"
9+
# Ignore the agent_security_initiative directory as it contains deliberately insecure code
10+
ignore:
11+
- dependency-name: "*"
12+
paths:
13+
- "initiatives/agent_security_initiative/**"
14+
labels:
15+
- "dependencies"
16+
- "security"
17+
18+
# Enable version updates for Python dependencies (pip/pipenv/poetry)
19+
- package-ecosystem: "pip"
20+
directory: "/"
21+
schedule:
22+
interval: "weekly"
23+
ignore:
24+
- dependency-name: "*"
25+
paths:
26+
- "initiatives/agent_security_initiative/**"
27+
labels:
28+
- "dependencies"
29+
- "security"
30+
31+
# Enable version updates for Docker
32+
- package-ecosystem: "docker"
33+
directory: "/"
34+
schedule:
35+
interval: "weekly"
36+
ignore:
37+
- dependency-name: "*"
38+
paths:
39+
- "initiatives/agent_security_initiative/**"
40+
labels:
41+
- "dependencies"
42+
- "security"
43+
44+
# Enable version updates for GitHub Actions
45+
- package-ecosystem: "github-actions"
46+
directory: "/"
47+
schedule:
48+
interval: "weekly"
49+
labels:
50+
- "dependencies"
51+
- "ci"

0 commit comments

Comments
 (0)