Skip to content

Commit 9b7c343

Browse files
committed
Set Dependabot cooldown period to 4 days
This addresses the zizmor findings by setting a cooldown period of 4 days for all package ecosystems in dependabot.yml. Related to: ENG-3236
1 parent 6a03289 commit 9b7c343

File tree

1 file changed

+15
-11
lines changed

1 file changed

+15
-11
lines changed

.github/dependabot.yml

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
version: 2
22
updates:
3-
- package-ecosystem: bundler
4-
directory: "/"
5-
schedule:
6-
interval: daily
7-
time: "14:00"
8-
open-pull-requests-limit: 10
9-
- package-ecosystem: "github-actions"
10-
directory: "/"
11-
schedule:
12-
interval: daily
13-
time: "14:00"
3+
- package-ecosystem: bundler
4+
directory: /
5+
schedule:
6+
interval: daily
7+
time: '14:00'
8+
open-pull-requests-limit: 10
9+
cooldown:
10+
default-days: 4
11+
- package-ecosystem: github-actions
12+
directory: /
13+
schedule:
14+
interval: daily
15+
time: '14:00'
16+
cooldown:
17+
default-days: 4

0 commit comments

Comments
 (0)