CDCgov / prime-reportstream

ReportStream is a public intermediary tool for delivery of data between different parts of the healthcare ecosystem.
https://reportstream.cdc.gov
Creative Commons Zero v1.0 Universal
72 stars 40 forks source link

Dependabot PRs - time box 9PM -9AM EST #16581

Open devopsmatt opened 3 days ago

devopsmatt commented 3 days ago

Dependabot's work is noisy and takes up GH Runners at random times throughout the day. This makes human-triggered automation runs slower due to busy GH Runners.

GitHub Dependabot does not directly support time-based constraints, such as limiting updates to a specific time window. However, you can work around this limitation by controlling when Dependabot runs through scheduled GitHub Actions or cron jobs that enable or disable Dependabot within a specific time window. Note that on weekends, dependabot can run at any time.

We want to disable Dependabot at 9AM EST and enable it back at 9PM EST. This will require cron-driven workflows to enable/disable daily:

DoD: Updated workflows in the repo.