Harden Repository Configuration - ton

[stepsecurity-app]

StepSecurity has identified repository-level hardening opportunities in TLMSLLC/ton based on your organization's Policy-Driven PR configuration.

Dependabot configuration should cover the configured package ecosystems

• Status: Failed
• Severity: Medium
• Description: This check fails if the repository has no .github/dependabot.yml or it does not cover the package ecosystems configured by the organization.
• Resolution: Add or update .github/dependabot.yml to include version updates for the configured package ecosystems.
• Details: dependabot configuration does not cover configured package ecosystems: *

Suggested changes

Create or update .github/dependabot.yml:

version: 2
updates:
  - package-ecosystem: "*"
    directory: "/"
    schedule:
      interval: "daily"

Enabling Pull Requests mode for these controls lets StepSecurity remediate them automatically via a pull request.