added dependabot configuration file (#1672)

dependabot is an independent security scanning tool which mostly
focuses on evaluating the dependency chain. Having the dependabot.yml
file on the main branch would enable the bot to test the dependencies
daily.
This commit is contained in:
jabia99 2021-08-26 09:41:54 +02:00 committed by GitHub
parent 78e042b47a
commit 6abb4b9af6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

16
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,16 @@
# Basic test trying dependabot
version: 2
updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
# Maintain dependencies for npm
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "daily"