Skip to content

Commit a84be18

Browse files
authored
Merge pull request #26 from netresearch/fix/harden-github-actions
fix: harden GitHub Actions against supply chain attacks
2 parents 5050200 + 1719d32 commit a84be18

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: github-actions
4+
directory: /
5+
schedule:
6+
interval: weekly
7+
groups:
8+
github-actions:
9+
patterns:
10+
- "*"

0 commit comments

Comments
 (0)