Skip to content

Commit cc65546

Browse files
committed
Add Dependabot alert workflow for high/critical issues
1 parent bf54530 commit cc65546

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Dependabot high/critical alert issues
2+
3+
on:
4+
pull_request:
5+
types: [opened, reopened, synchronize]
6+
7+
permissions:
8+
issues: write
9+
contents: write # was: read -> needed for merging
10+
pull-requests: write # was: read -> needed for merging
11+
checks: read
12+
statuses: read
13+
14+
jobs:
15+
dependabot-security:
16+
uses: corbado/ci-templates/.github/workflows/dependabot-security.yml@main
17+
secrets:
18+
repo-token: ${{ secrets.GITHUB_TOKEN }}
19+
with:
20+
auto-merge: true # or false for "issue only"
21+
team_mention: "@Dopeamin / @snacker81" # optional override

0 commit comments

Comments
 (0)