You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2022/06/19 16:14:26 UTC

[cxf] branch master updated: chore: Included githubactions in the dependabot config (#959)

This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/master by this push:
     new 145b3a3fd6 chore: Included githubactions in the dependabot config (#959)
145b3a3fd6 is described below

commit 145b3a3fd6b598693a155ba329c720265e72b08f
Author: Naveen <17...@users.noreply.github.com>
AuthorDate: Sun Jun 19 11:14:20 2022 -0500

    chore: Included githubactions in the dependabot config (#959)
    
    This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
    
    Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
    
    GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
    
    https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
    Signed-off-by: naveen <17...@users.noreply.github.com>
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..5ace4600a1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"