From 5d04b6d3ad64c6e94108d1c4741b02baeeb72a75 Mon Sep 17 00:00:00 2001 From: Walt Della Date: Mon, 28 Aug 2023 12:39:58 -0700 Subject: [PATCH] Add Dependabot config for GitHub Actions We have some 3rd party GitHub Action's we're pinning for determinism and security, however we'd like these to stay up to date. Initial reviewers are a mix of security and internal tools folks, chosen to be able to perform initial triage. --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index dbf3015b27b5f..ddaea8a35501f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -169,3 +169,16 @@ updates: - jentfoo - rosstimothy - zmb3 + + - package-ecosystem: github-actions + directory: "/" + schedule: + interval: weekly + day: monday + time: "09:00" + timezone: "America/Los_Angeles" + reviewers: + - wadells + - jentfoo + - fheinecke + - camscale