You should be able to enable dependabot via Settings -> Code security and analysis on the repo. You'll then need to enable Dependabot alerts, and Dependabot security updates. This should then start creating merge requests when hadolint gets updated, as well as when github actions themselves get updated.
lorenzo
commented
2 years ago
You should be able to enable dependabot via
Settings->Code security and analysison the repo. You'll then need to enableDependabot alerts, andDependabot security updates. This should then start creating merge requests when hadolint gets updated, as well as when github actions themselves get updated.