From 5b9f6d003d7a86b3bbbd0a0558246b33c93f2373 Mon Sep 17 00:00:00 2001 From: Yiaany Date: Mon, 31 Aug 2026 19:45:04 +0500 Subject: [PATCH] fix(ci): restore scorecard and stop dependency PR spam --- .github/dependabot.yml | 21 --------------------- .github/workflows/scorecard.yml | 2 +- 2 files changed, 1 insertion(+), 22 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index b9bbf52..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,21 +0,0 @@ -version: 2 -updates: - - package-ecosystem: npm - directory: / - schedule: - interval: weekly - groups: - root-development-dependencies: - dependency-type: development - - package-ecosystem: npm - directory: /hosted - schedule: - interval: weekly - - package-ecosystem: github-actions - directory: / - schedule: - interval: weekly - - package-ecosystem: docker - directory: /hosted - schedule: - interval: weekly diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 13cdc3d..30dc0af 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -20,7 +20,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false - - uses: ossf/scorecard-action@99c09fe975337306107572b4fdf4db224cf8e2f2 # v2.4.3 + - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: results_file: results.sarif results_format: sarif