flux2/.github/dependabot.yml

version: 2

updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    labels: ["area/build"]
    schedule:
      # by default this will be on a monday.
      interval: "weekly"
Enable Dependabot for GitHub Actions Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com> 2 years ago			`version: 2`

			`updates:`
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
build: Pin GitHub Actions The main benefit of pinning GitHub actions is the determinism it brings in terms of what version of a given action will be executed. This is a step towards having hermetic builds. Once pinned to a commit, dependabot will automatically issue PRs to update to newer versions. Pinned versions is the only security metric from OpenSSF scorecard that this repository currently have a zero score. Signed-off-by: Paulo Gomes <paulo.gomes@weave.works> 2 years ago			`labels: ["area/build"]`
Enable Dependabot for GitHub Actions Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com> 2 years ago			`schedule:`
build: Pin GitHub Actions The main benefit of pinning GitHub actions is the determinism it brings in terms of what version of a given action will be executed. This is a step towards having hermetic builds. Once pinned to a commit, dependabot will automatically issue PRs to update to newer versions. Pinned versions is the only security metric from OpenSSF scorecard that this repository currently have a zero score. Signed-off-by: Paulo Gomes <paulo.gomes@weave.works> 2 years ago			`# by default this will be on a monday.`
Enable Dependabot for GitHub Actions Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com> 2 years ago			`interval: "weekly"`