Enable dependabot integration - Githubissues

jaegertracing / jaeger-clickhouse

Jaeger ClickHouse storage plugin implementation

Apache License 2.0

233 stars 50 forks source link

Enable dependabot integration #127

Open DarkWanderer opened 1 year ago

DarkWanderer commented 1 year ago

Which problem is this PR solving?

This PR adds Dependabot integration, which allows to semi-automatically resolve security issues related to outdated dependencies
Helps solve #123 and similar issues

Short description of the changes

Adds dependabot.yml file which configures automatic PRs with Go dependency updates
Dependabot will create automatic PRs with dependency updates, as well as generate security advisories
NOTE: Additional action required on repository level to enable dependabot alerts, see https://github.com/jaegertracing/jaeger-clickhouse/security/dependabot

Example security advisories Example PRs