summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTom Hromatka <tom.hromatka@oracle.com>2023-02-02 09:34:02 -0700
committerPaul Moore <paul@paul-moore.com>2023-02-06 17:30:43 -0500
commit791a252af94fa67932463919c674e77185780f8c (patch)
tree1cb242ce21038def6a324c2c8d7f9398f1471d9f
parentbfbc9770bdb2677becf6c235731abe33ad36b7f9 (diff)
downloadlibseccomp-791a252af94fa67932463919c674e77185780f8c.tar.gz
github: Add dependency checker action
Add an action, dependabot, that will periodically check GitHub Actions dependencies. It is currently configured to run weekly. If dependabot finds an update, it will open a pull request. See here for more details: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com> [PM: added a trailing space to the "RFE:" prefix] Signed-off-by: Paul Moore <paul@paul-moore.com>
-rw-r--r--.github/dependabot.yml23
1 files changed, 23 insertions, 0 deletions
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..71d60a2
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,23 @@
+#
+# Dependabot Workflow for libseccomp
+#
+# Copyright (c) 2023 Oracle and/or its affiliates.
+# Author: Tom Hromatka <tom.hromatka@oracle.com>
+#
+
+# based on this guide from GitHub:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ # Check for updates to GitHub Actions every week
+ interval: "weekly"
+ commit-message:
+ prefix: "RFE: "
+ labels:
+ - "enhancement"
+ - "priority/low"