Skip to content

Commit 5c987cb

Browse files
Delay dependabot updates by 5 days (#281)
Wait 5 days to get updates. We hope supply chain attacks are detected before these 5 days.
1 parent d5f1053 commit 5c987cb

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

.github/dependabot.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,8 @@ updates:
88
github-actions:
99
patterns:
1010
- "*"
11+
cooldown:
12+
default-days: 5
1113
- package-ecosystem: "gomod"
1214
directory: "/"
1315
schedule:
@@ -16,6 +18,8 @@ updates:
1618
gomod:
1719
patterns:
1820
- "*"
21+
cooldown:
22+
default-days: 5
1923
- package-ecosystem: "docker"
2024
directory: "/"
2125
schedule:
@@ -24,6 +28,8 @@ updates:
2428
docker:
2529
patterns:
2630
- "*"
31+
cooldown:
32+
default-days: 5
2733
- package-ecosystem: "npm"
2834
directory: "/"
2935
schedule:
@@ -32,3 +38,5 @@ updates:
3238
npm:
3339
patterns:
3440
- "*"
41+
cooldown:
42+
default-days: 5

0 commit comments

Comments
 (0)