Skip to content

Commit 568a7cf

Browse files
committed
Configure Dependabot to check for outdated actions used in workflows
The addition of this configuration file will cause Dependabot to periodically check the versions of the GitHub Actions actions dependencies of the repository's workflows. If any are found to be outdated, it will submit a pull request to update them.
1 parent b75871d commit 568a7cf

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

.github/dependabot.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# See: https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#about-the-dependabotyml-file
2+
version: 2
3+
4+
updates:
5+
# Configure check for outdated GitHub Actions actions in workflows.
6+
# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/dependabot/README.md
7+
# See: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot
8+
- package-ecosystem: github-actions
9+
directory: /.github/workflows/
10+
assignees:
11+
- per1234
12+
labels:
13+
- "topic: infrastructure"
14+
open-pull-requests-limit: 100
15+
schedule:
16+
interval: daily

0 commit comments

Comments
 (0)