24 lines
1.0 KiB
YAML
24 lines
1.0 KiB
YAML
# See: https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file
|
|
version: 2
|
|
|
|
updates:
|
|
# Configure check for outdated GitHub Actions actions in workflows.
|
|
# See: https://docs.github.com/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
|
|
- package-ecosystem: github-actions
|
|
directory: / # Check the repository's workflows under /.github/workflows/
|
|
schedule:
|
|
interval: daily
|
|
|
|
# Configure check for outdated base image digest in the Dockerfile.
|
|
# See: https://docs.docker.com/build/building/best-practices/#pin-base-image-versions
|
|
- package-ecosystem: docker
|
|
directory: / # Check the repository's Dockerfile at /Dockerfile
|
|
schedule:
|
|
interval: weekly
|
|
|
|
# Configure check for outdated codespell version in requirements.txt.
|
|
- package-ecosystem: pip
|
|
directory: / # Check the repository's Python dependencies at /requirements.txt
|
|
schedule:
|
|
interval: daily
|