From 9e187f7a55bddddc868fc6885483acdbecc0a0ce Mon Sep 17 00:00:00 2001
From: Austin Valle <austinvalle@gmail.com>
Date: Wed, 31 Jan 2024 08:37:34 -0500
Subject: [PATCH] Added GHA dependabot config for managing hashicorp actions

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 938a055467..552d6ab99c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,10 @@ updates:
     directory: "/tools"
     schedule:
       interval: "daily"
+  # Dependabot only updates hashicorp GHAs, external GHAs are managed by internal tooling (tsccr)
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-name: "hashicorp/*"