mirror of
https://github.com/nicolargo/glances.git
synced 2026-06-02 19:05:00 -04:00
599c193258
- Add top-level on caller (ci.yml) and scheduled/event
workflows (inactive_issues.yml, needs_contributor.yml)
- Declare explicit job-level permissions across all reusable workflows
- Pin all third-party actions to immutable commit SHAs (was using mutable
tags, including the critical )
- Align codeql-action on v3 across quality.yml and cyber.yml
- Add timeout-minutes on every job to prevent runaway builds
- Add concurrency group on ci.yml with cancel-in-progress for PRs only
- Add .github/dependabot.yml for automated SHA and npm dependency updates
19 lines
345 B
YAML
19 lines
345 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
actions:
|
|
patterns:
|
|
- "*"
|
|
- package-ecosystem: "npm"
|
|
directory: "/glances/outputs/static"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
npm:
|
|
patterns:
|
|
- "*"
|