New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Keep GitHub Actions up to date with GitHub's Dependabot #1669

Closed

cclauss wants to merge 1 commit into actions:main from cclauss:patch-1

cclauss commented Apr 1, 2024 •

edited

Fixes software supply chain safety warnings like at the bottom right of
https://github.com/actions/checkout/actions/runs/8497255927
https://github.com/actions/checkout/actions/runs/8282628153


          Keep GitHub Actions up to date with GitHub's Dependabot

766bfba

Fixes software supply chain safety warnings like at the bottom right of
https://github.com/actions/checkout/actions/runs/8497255927

* [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot)
* [Configuration options for the dependabot.yml file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem)

cclauss requested a review from a team as a code owner

April 1, 2024 08:13

lawyoum approved these changes

View reviewed changes

Contributor

cory-miller commented Apr 23, 2024

There were a few versions of this config in various PRs that I combined into #1688

cory-miller closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment