From 4751d23df83a9e16bd53b6b9cb63e67de3f1470d Mon Sep 17 00:00:00 2001 From: Will Murphy Date: Thu, 18 Jan 2024 05:40:03 -0500 Subject: [PATCH] chore: enable automatic approval of dependabot PRs To reduce toil in this repo, enable dependabot PRs to be automatically approved, but not merged. They are not automatically merged because if the default GitHub token is used to automatically merge a PR, the resulting commit will not trigger workflows on main. Rather than generate a more potent token, just automatically review them, which reduces toil by eliminating several clicks and page loads for maintainers who are trying to merge dependabot PRs. Signed-off-by: Will Murphy --- .github/workflows/dependabot-automation.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/workflows/dependabot-automation.yaml diff --git a/.github/workflows/dependabot-automation.yaml b/.github/workflows/dependabot-automation.yaml new file mode 100644 index 00000000000..1c3ded297c7 --- /dev/null +++ b/.github/workflows/dependabot-automation.yaml @@ -0,0 +1,10 @@ +name: Dependabot Automation +on: + pull_request: + +permissions: + pull-requests: write + +jobs: + run: + uses: anchore/workflows/.github/workflows/dependabot-automation.yaml@main