dependabot config

Signed-off-by: Barabanov <[email protected]>

Author: AlexanderBarabanov

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: /
+    schedule:
+      interval: "weekly"
+    target-branch: "master"
+    groups:
+      github-actions-dependency:
+        applies-to: version-updates
+        patterns:
+          - "*"
+  - package-ecosystem: pip
+    directory: /src/python
+    schedule:
+      interval: weekly
+    target-branch: "master"

.github/workflows/security-scan.yml

@@ -80,4 +80,4 @@ jobs:
           scanners: "vuln,secret,config"
           format: "sarif"
           timeout: "15m"
-          ignore_unfixed: "false"
+          ignore_unfixed: "false"