Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set up dependabot for automated Dockerfile updates. #351

Merged
merged 1 commit into from
Jul 25, 2023

Conversation

fniephaus
Copy link
Member

What does this PR do?

This PR adds a dependabot.yml config that enables automatic Dockerfile version updates, and adds Dockerfiles for all allowed Docker images.

Checklist before merging

n/a

@fniephaus fniephaus requested a review from a team as a code owner July 25, 2023 11:18
@dnestoro
Copy link
Member

LGTM! Next steps would be changing DockerTask and GrypeTask so we can get rid of the list. I can do that. What do you think @fniephaus should we do that in a follow-up PR or I should contribute to this PR so we can merge everything together?

.github/dependabot.yml Outdated Show resolved Hide resolved
This PR adds a `dependabot.yml` config that enables automatic Dockerfile version updates, and adds Dockerfiles for all allowed Docker images.
@fniephaus fniephaus force-pushed the fniephaus/dependabot-docker branch from 639c2bd to a5d8944 Compare July 25, 2023 11:34
@fniephaus
Copy link
Member Author

What do you think @fniephaus should we do that in a follow-up PR or I should contribute to this PR so we can merge everything together?

I don't think we need to do everything in this PR. Let's get rid of the AllowedDockerImages.txt in a follow-up PR.

@fniephaus fniephaus merged commit eac3b23 into master Jul 25, 2023
81 checks passed
@fniephaus fniephaus deleted the fniephaus/dependabot-docker branch July 25, 2023 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants