From 6abb4b9af69c6c5348a894b001f552bf7f33d740 Mon Sep 17 00:00:00 2001
From: jabia99 <86827730+jabia99@users.noreply.github.com>
Date: Thu, 26 Aug 2021 09:41:54 +0200
Subject: [PATCH] added dependabot configuration file (#1672)

dependabot is an independent security scanning tool which mostly
focuses on evaluating the dependency chain. Having the dependabot.yml
file on the main branch would enable the bot to test the dependencies
daily.
---
 .github/dependabot.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..e3c6821c2
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+# Basic test trying dependabot
+
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  # Maintain dependencies for npm
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "daily"