Create Dependabot config file #86
Conversation
| @@ -0,0 +1,7 @@ | |||
| version: 2 | |||
| updates: | |||
| - package-ecosystem: pip | |||
There was a problem hiding this comment.
Sorry I use the dependabot to generate this. I don't know what package manager the repository uses. Is this wrong?
There was a problem hiding this comment.
https://dependabot.com/docs/config-file/#package_manager-required
Should be these i think
go:modules
go:dep
There was a problem hiding this comment.
I don't see any package manager in this repository. Am I missing something?
There was a problem hiding this comment.
dont know this. i only see docker container as package, dont see scorecard released as a go package (maybe we should). @dlorenc - can you help to review and see what is needed here.
There was a problem hiding this comment.
Doesn’t this Python repo have dependency on pip packages?
There was a problem hiding this comment.
I didn't see the repo, got confused with scorecards, yes criticality score is all pip.
| @@ -0,0 +1,7 @@ | |||
| version: 2 | |||
| updates: | |||
| - package-ecosystem: pip | |||
There was a problem hiding this comment.
I didn't see the repo, got confused with scorecards, yes criticality score is all pip.
Enable Dependabot for security notifications on dependencies https://dependabot.com/