mirror of
https://github.com/ossf/scorecard.git
synced 2024-09-11 08:55:27 +03:00
This is apparently required with the current implementation of multi dir PRs. Signed-off-by: Spencer Schrock <sschrock@google.com>
53 lines
1.3 KiB
YAML
53 lines
1.3 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: gomod
|
|
directories:
|
|
- "/"
|
|
- "/tools"
|
|
schedule:
|
|
interval: daily
|
|
rebase-strategy: disabled
|
|
commit-message:
|
|
prefix: ":seedling:"
|
|
open-pull-requests-limit: 3
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
rebase-strategy: disabled
|
|
commit-message:
|
|
prefix: ":seedling:"
|
|
groups:
|
|
github-actions:
|
|
patterns:
|
|
- "*"
|
|
# These actions directly influence the build process and are excluded from grouped updates
|
|
exclude-patterns:
|
|
- "actions/setup-go"
|
|
- "arduino/setup-protoc"
|
|
- "goreleaser/goreleaser-action"
|
|
- package-ecosystem: docker
|
|
directories:
|
|
- "/"
|
|
- "/cron/internal/bq"
|
|
- "/cron/internal/worker"
|
|
- "/cron/internal/webhook"
|
|
- "/cron/internal/controller"
|
|
- "/cron/internal/cii"
|
|
- "/clients/githubrepo/roundtripper/tokens/server"
|
|
- "/attestor"
|
|
schedule:
|
|
interval: weekly
|
|
rebase-strategy: disabled
|
|
commit-message:
|
|
prefix: ":seedling:"
|
|
# currently needed to get PRs which actually update multiple directories in a single PR
|
|
# https://github.com/dependabot/dependabot-core/issues/2178#issuecomment-2109164992
|
|
groups:
|
|
golang:
|
|
patterns:
|
|
- "golang"
|
|
distroless:
|
|
patterns:
|
|
- "distroless/base"
|