mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-09-22 11:06:27 -04:00
Inverle
6625137a8e
* Add zizmor workflow for action security checks https://docs.zizmor.sh/integrations/#github-actions https://github.com/zizmorcore/zizmor-action To avoid pushing unsafe actions and also for performing the scan automatically on each zizmor upgrade, in case there are any new unsafe behaviors to find. * Zizmor fixes * Set dependabot cooldowns to 7 days * Fix workflow concurrency and improve code quality * Use pedantic persona in zizmor workflow
38 lines
823 B
YAML
38 lines
823 B
YAML
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|
|
groups:
|
|
eslint:
|
|
patterns:
|
|
- "*eslint*"
|
|
- "globals"
|
|
- "neostandard"
|
|
stylelint:
|
|
patterns:
|
|
- "*stylelint*"
|
|
- package-ecosystem: "composer"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|
|
- package-ecosystem: "composer"
|
|
directory: "/lib/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|