chore(dependabot): specify registries

Author: Phil-NHS

.github/dependabot.yml

@@ -3,17 +3,19 @@ registries:
   nuget-org:
     type: nuget-feed
     url: https://api.nuget.org/v3/index.json
-  github-nuget-feed:
-    type: nuget-feed
-    url: https://nuget.pkg.github.com/TechnologyEnhancedLearning/index.json
-    # Though we ignore the feed it will still need to know about it
-    token: ${{ secrets.NUGETKEY }}
+  # github-nuget-feed:
+    # type: nuget-feed
+    # url: https://nuget.pkg.github.com/TechnologyEnhancedLearning/index.json
+    # # Though we ignore the feed it will still need to know about it
+    # # dependabot is more restrictive it needs a better key
+    # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#adding-a-repository-secret-for-dependabot
+    # token: ${{ secrets.NUGETKEY }}
 updates:
   - package-ecosystem: "nuget"
     directory: "/"
     registries:
       - nuget-org
-      - github-nuget-feed
+      # - github-nuget-feed
     schedule:
       interval: "daily"
     open-pull-requests-limit: 100

nuget.config.cicd

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!--
 
-This config is replaces nuget.config in cicd.
-It provides credentials incase the TEL git packages feed is used.
+	This config is replaces nuget.config in cicd.
+	It provides credentials incase the TEL git packages feed is used.
 
 -->
 <configuration>