Skip to content

Commit e64beda

Browse files
committed
Set Dependabot cooldown period to 4 days
This addresses the zizmor findings by setting a cooldown period of 4 days for all package ecosystems in dependabot.yml. Related to: ENG-3236
1 parent d44f387 commit e64beda

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

.github/dependabot.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
version: 2
22
updates:
3-
- package-ecosystem: "github-actions"
4-
directory: "/"
3+
- package-ecosystem: github-actions
4+
directory: /
55
schedule:
66
interval: daily
7-
time: "14:00"
7+
time: '14:00'
8+
cooldown:
9+
default-days: 4

0 commit comments

Comments
 (0)