Skip to content

Commit 280f657

Browse files
authored
✨ Add cooldown to Dependabot updates (#6332)
One of the learnings from the latest supply chain attacks is, that parts of it can be mitigated by not updating asap. This adds a cooldown settings to our Depndabot updates. Signed-off-by: Christian Zunker <christian@mondoo.com>
1 parent af93da8 commit 280f657

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.github/dependabot.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,11 @@ updates:
55
directory: /
66
schedule:
77
interval: weekly
8+
cooldown:
9+
default-days: 7
810
- package-ecosystem: docker
911
directory: /
1012
schedule:
1113
interval: weekly
14+
cooldown:
15+
default-days: 7

0 commit comments

Comments
 (0)