Drone dependencies - Githubissues

monasca / pr-bot

Automatic version checker bot

Apache License 2.0

6 stars 1 forks source link

Drone dependencies #13

Open timothyb89 opened 7 years ago

timothyb89 commented 7 years ago

.drone.yml can depend on docker images which we could track and update.

The main complication is that drone projects that use secrets require a .drone.yml.sig which the bot will not be able to update.

could the bot be configured to update drone signatures? lots of complexity, not much benefit
is it acceptable to ignore repos that require a signed .drone.yml?
would there be value in proposing a PR with the changes and letting another user apply the update?
- this may not save devs much time, since they'd have to clone the branch and sign the changes manually
could we instead file an issue rather than making a PR?