Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dependabot.yaml: Add dependabot configuration for the project #1281

Merged
merged 5 commits into from
Sep 28, 2022

Conversation

hjpotter92
Copy link
Member

What does this pull request do? Explain your changes. (required)

Adds dependabot CI flow to github

Specific updates (required)

dependabot is github's bot to identify dependencies that are out of date or have had new security patches released, which might be useful for the project

  • How did you test each of these updates (required)

not needed

Does this pull request close any open issues?

no

Checklist:

  • I have read the CONTRIBUTING document.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.

@vercel
Copy link

vercel bot commented Sep 16, 2022

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
livepeer-studio ✅ Ready (Inspect) Visit Preview Sep 26, 2022 at 10:12AM (UTC)

Copy link
Collaborator

@Shih-Yu Shih-Yu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍🏼

Copy link
Member

@victorges victorges left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This CodeQL thing is pretty cool! Plenty of alerts already.

Is there a way to configure it to ignore *.test.(ts|js) files? On those I guess it wouldn't make much sense and it's pointing some theoretical security issues there.

 - Create a codeql config file
@hjpotter92
Copy link
Member Author

Is there a way to configure it to ignore *.test.(ts|js) files? On those I guess it wouldn't make much sense and it's pointing some theoretical security issues there.

Done. Added a paths-ignore field to codeql config.

@hjpotter92 hjpotter92 merged commit 7814e9b into master Sep 28, 2022
@hjpotter92 hjpotter92 deleted the hjp/dependabot branch September 28, 2022 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants