search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.55k stars 954 forks source link

Support for dependencies on CI/CD #3675

Closed laurentsimon closed 1 year ago

laurentsimon commented 3 years ago

It' be awesome to support CI/CD systems such as, for example, github actions and Google's cloud build.

Both of these make intensive use of repos that developers also want to be able to update.

OpenSSF's scorecard is working on supporting this too.

jurre commented 3 years ago

We already have support for GitHub Actions, I'm not super familiar with Google cloud build, but from a first glance it seems like it'd be pretty similar to actions.

However, currently we've paused adding new ecosystems, so I can't give any indication as to when we might be able to start looking into adding support for GCB

jeffwidman commented 1 year ago

Closing as a duplicate of https://github.com/dependabot/dependabot-core/issues/2140 which already tracks Google Cloud Build.