[CP-Sec] Dependabot PRs to be reviewed by Security managers team

alan-forbes-cp · May 28, 2024 · 11718c5 · 11718c5
1 parent d4a2411
commit 11718c5
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -40,4 +40,15 @@ updates:
         versions: ["4.x", "5.x"]
       # For all packages, ignore all patch updates
       - dependency-name: "*"
-        update-types: ["version-update:semver-patch"] 
+        update-types: ["version-update:semver-patch"]
+  # Enable version updates for Github Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    reviewers:
+      - "codeplaysoftware/security-managers"