dependabot.yml 622 B

123456789101112131415
  1. # See GitHub's documentation for more information on this file:
  2. # https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
  3. version: 2
  4. updates:
  5. - package-ecosystem: "gomod"
  6. directory: "/"
  7. schedule:
  8. interval: "daily"
  9. - package-ecosystem: "github-actions"
  10. directory: "/"
  11. schedule:
  12. interval: "daily"
  13. # TODO: Dependabot only updates hashicorp GHAs in the template repository, the following lines can be removed for consumers of this template
  14. allow:
  15. - dependency-name: "hashicorp/*"