quine-global-labs/mirror-coreos-chunkah
1
0
Fork 0
mirror of https://github.com/coreos/chunkah.git synced 2026-11-03 21:49:44 -09:00
Code Issues Projects Releases Packages Wiki Activity

ci: add dependabot cooldown

Browse source 
Adding a cooldown timer for dependabot updates is beneficial for
stability and supply-chain security. For reference:
https://docs.zizmor.sh/audits/#dependabot-cooldown
This commit is contained in:
Daniel Hast 2026-05-03 22:31:11 -04:00 committed by Jonathan Lebon
parent dbc4abd0ab
commit 6c9cfd420b
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.github/dependabot.yml vendored
View file

@ -17,6 +17,8 @@ updates:
open-pull-requests-limit: 5
commit-message:
prefix: "deps"
cooldown:
default-days: 7
# GitHub Actions
- package-ecosystem: github-actions
@ -30,3 +32,5 @@ updates:
- "*"
commit-message:
prefix: "ci"
cooldown:
default-days: 7