mirror of
https://github.com/trufflesecurity/xsshunter
synced 2024-11-10 06:44:13 +00:00
883039e6fa
* fix validation, docker user, and only use dependabot for security updates * vars
18 lines
769 B
YAML
18 lines
769 B
YAML
# To get started with Dependabot version updates, you'll need to specify which
|
|
# package ecosystems to update and where the package manifests are located.
|
|
# Please see the documentation for all configuration options:
|
|
# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm" # See documentation for possible values
|
|
directory: "/" # Location of package manifests
|
|
schedule:
|
|
interval: "weekly"
|
|
# Disable version updates for npm dependencies, only have security updates
|
|
open-pull-requests-limit: 0
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
# Check for updates to GitHub Actions every weekday
|
|
interval: "weekly"
|