Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dont include labels for dependabot ecosystems #2720

Merged
merged 1 commit into from
Mar 21, 2024
Merged

Conversation

wagoodman
Copy link
Contributor

@wagoodman wagoodman commented Mar 15, 2024

Dependabot is starting to include labels for each ecosystem that is being updated, which is great, but in a repo like syft where we have labels that represent cataloger features/bugs/etc, this is a little confusing.

PR: #2717
Log: https://github.com/anchore/syft/network/updates/800618339

Screenshot 2024-03-15 at 10 27 54 AM

For the meantime I've deleted the github_actions and github-actions (duplicate-ish) labels.

From https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#labels

By default, Dependabot raises all pull requests with the dependencies label. If more than one package manager is defined, Dependabot includes an additional label on each pull request. This indicates which language or ecosystem the pull request will update, for example: java for Gradle updates and submodules for git submodule updates. Dependabot creates these default labels automatically, as necessary in your repository.

Use labels to override the default labels and specify alternative labels for all pull requests raised for a package manager. If any of these labels is not defined in the repository, it is ignored. To disable all labels, including the default labels, use labels: [ ].

For the meantime I'm just going to take off the ecosystem labels, we can always override them with more labels later if we want.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
@wagoodman wagoodman added the changelog-ignore Don't include this issue in the release changelog label Mar 15, 2024
@wagoodman wagoodman requested a review from a team March 15, 2024 14:29
@wagoodman wagoodman self-assigned this Mar 15, 2024
@spiffcs spiffcs merged commit 0d5ebed into main Mar 21, 2024
11 checks passed
@spiffcs spiffcs deleted the dependabot-labels branch March 21, 2024 16:16
brian-ebarb pushed a commit to brian-ebarb/syft that referenced this pull request Apr 17, 2024
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
changelog-ignore Don't include this issue in the release changelog
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

3 participants