1
0
Fork 0
mirror of https://github.com/middleman/middleman.git synced 2022-11-09 12:20:27 -05:00

Included githubactions in the dependabot config (#2544)

This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
This commit is contained in:
nathannaveen 2022-04-04 20:51:53 -04:00 committed by GitHub
parent 604d6b2f15
commit 00e8e6e562
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -12,3 +12,10 @@ updates:
- dependency-name: pry-stack_explorer
versions:
- ">= 5.0"
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: monthly
time: "08:00"
timezone: America/New_York
open-pull-requests-limit: 10