From d20824bbcd15667157ffc1ebacf3bf7e06e40459 Mon Sep 17 00:00:00 2001
From: Daniel Bloom <daniel@wormholelabs.xyz>
Date: Fri, 5 Jun 2026 23:29:18 -0400
Subject: [PATCH] fix: address zizmor security findings in workflow files

---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cd02053..c825f43 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
     # Only update Wormhole dependencies
     allow:
       - dependency-name: "@wormhole-foundation/*"