Skip to content

Commit 0e40893

Browse files
committed
Set Dependabot cooldown period to 4 days
This addresses the zizmor findings by setting a cooldown period of 4 days for all package ecosystems in dependabot.yml. Related to: ENG-3236
1 parent cf7ee94 commit 0e40893

File tree

1 file changed

+11
-7
lines changed

1 file changed

+11
-7
lines changed

.github/dependabot.yml

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,21 @@
11
version: 2
22
updates:
3-
- package-ecosystem: maven
4-
directory: "/"
3+
- package-ecosystem: maven
4+
directory: /
55
schedule:
66
interval: daily
7-
time: "14:00"
7+
time: '14:00'
88
open-pull-requests-limit: 10
99
groups:
1010
jackson:
1111
patterns:
12-
- "com.fasterxml.jackson*"
13-
- package-ecosystem: "github-actions"
14-
directory: "/"
12+
- com.fasterxml.jackson*
13+
cooldown:
14+
default-days: 4
15+
- package-ecosystem: github-actions
16+
directory: /
1517
schedule:
1618
interval: daily
17-
time: "14:00"
19+
time: '14:00'
20+
cooldown:
21+
default-days: 4

0 commit comments

Comments
 (0)