Azure / ResourceModules

This repository includes a CI platform for and collection of mature and curated Bicep modules. The platform supports both ARM and Bicep and can be leveraged using GitHub actions as well as Azure DevOps pipelines.
https://aka.ms/carml
MIT License
725 stars 459 forks source link

[Feature Request]: New platform scheduled pipeline to check external version updates #2690

Open eriqua opened 1 year ago

eriqua commented 1 year ago

Description

Implement a platform scheduled pipeline to check the latest version for all external sources, e.g., public external actions/steps or tools. Discuss a possible MVP with the team, for example:

Check https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates

OR

Versions to check

Note: First draft not exhaustive

BernieWhite commented 1 year ago

Dependabot can automatically bump PSRule action and other GitHub Actions. Config looks like this: https://github.com/Azure/PSRule.Rules.Azure/blob/001f49cffe50b10383934594ea8f926b8526fc13/.github/dependabot.yml#L25-L33