anchore / scan-action

Anchore container analysis and scan provided as a GitHub Action
MIT License
212 stars 77 forks source link

chore: auotmatically merge dependabot PRs #255

Closed willmurphyscode closed 11 months ago

willmurphyscode commented 11 months ago

If a dependabot PR bumps a patch or minor version, and tests are green, just merge it. This reduces toil for maintainers.

Workflow file is from anchore/quill/.github/workflows. See anchore/quill#220 and anchore/quill#221.

Note that I had to retry one test job due to a timeout, but it passed on the first retry and seems unrelated.