Skip to content

Commit 7dbb7c4

Browse files
committed
Set Dependabot cooldown period to 4 days
This addresses the zizmor findings by setting a cooldown period of 4 days for all package ecosystems in dependabot.yml. Related to: ENG-3236
1 parent a49cc35 commit 7dbb7c4

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

.github/dependabot.yml

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
version: 2
22
updates:
3-
- package-ecosystem: "github-actions"
4-
directory: "/"
5-
schedule:
6-
interval: daily
7-
time: "14:00"
3+
- package-ecosystem: github-actions
4+
directory: /
5+
schedule:
6+
interval: daily
7+
time: '14:00'
8+
cooldown:
9+
default-days: 4

0 commit comments

Comments
 (0)