User tests: Successful: Unsuccessful:
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen 172697+naveensrinivasan@users.noreply.github.com
Status | New | ⇒ | Pending |
Category | ⇒ | Repository |
Status | Pending | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2022-06-28 07:00:12 |
Closed_By | ⇒ | richard67 | |
Labels |
Added:
?
|
Closing as we do not use dependabot in the repository and don't plan to do so. We are currently discussing to use a similar tool in future, but not dependabot.