From 9c5d54426da9c5ae8b422e711b9ea5a672e3eba8 Mon Sep 17 00:00:00 2001 From: neilnaveen <42328488+neilnaveen@users.noreply.github.com> Date: Tue, 5 Apr 2022 10:44:17 -0500 Subject: [PATCH] Included githubactions in the dependabot config (#1536) This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Co-authored-by: Diego Molina [skip ci] --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 984de895b..637f89b29 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -42,3 +42,9 @@ updates: interval: daily time: '08:00' open-pull-requests-limit: 99 +- package-ecosystem: github-actions + directory: "/" + schedule: + interval: daily + time: '08:00' + open-pull-requests-limit: 99