Merge pull request #127 from TechnologyEnhancedLearning/ci-dependabot-setup

chore(dependabot): try azure token dont have permission to make new d…

Author: Phil-NHS

.github/dependabot.yml

@@ -3,19 +3,24 @@ registries:
   nuget-org:
     type: nuget-feed
     url: https://api.nuget.org/v3/index.json
-  # github-nuget-feed:
-    # type: nuget-feed
-    # url: https://nuget.pkg.github.com/TechnologyEnhancedLearning/index.json
+  github-nuget-feed:
+    type: nuget-feed
+    url: https://nuget.pkg.github.com/TechnologyEnhancedLearning/index.json
+    username: "kevin.whittaker" 
+    # Hoping this has the permissions
+    password: ${{ secrets.AZURE_DEVOPS_PAT }}
+    
     # # Though we ignore the feed it will still need to know about it
     # # dependabot is more restrictive it needs a better key
+    # # https://github.com/TechnologyEnhancedLearning/TELBlazor/network/updates
     # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#adding-a-repository-secret-for-dependabot
     # token: ${{ secrets.NUGETKEY }}
 updates:
   - package-ecosystem: "nuget"
     directory: "/"
     registries:
       - nuget-org
-      # - github-nuget-feed
+      - github-nuget-feed
     schedule:
       interval: "daily"
     open-pull-requests-limit: 100