PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.51k stars 612 forks source link

Fix dependabot to update github actions #1057

Closed ericwb closed 1 year ago

ericwb commented 1 year ago

The dependabot.yml file isn't enabling dependabot checks for some reason. This change updates the file to match the example given by the GitHub documentation more closely.

I suspect the issue is the swapped keys of schedule and interval.

This change also modifies the schedule of update checks to weekly instead of monthly.

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot#example-dependabotyml-file-for-github-actions