diff --git a/profiles/github/stacklok-lightweight-dependabot.yaml b/profiles/github/stacklok-lightweight-dependabot.yaml new file mode 100644 index 0000000..1968cc0 --- /dev/null +++ b/profiles/github/stacklok-lightweight-dependabot.yaml @@ -0,0 +1,73 @@ +--- +# Stacklok profile +version: v1 +type: profile +name: stacklok-lightweight-dependabot +# The selector is used to select repositories that this profile will be applied to. +# In this case, we are selecting repositories that are considered low-maintenance. +selection: + - entity: repository + selector: > + repository.name.startsWith('stacklok/quiver') || + repository.name.startsWith('stacklok/minder-bundle-updater') || + repository.name.startsWith('stacklok/healthcheck-bundle') +display_name: Stacklok Lightweight Dependabot Profile +context: + provider: github +alert: "off" +remediate: "on" +repository: + - type: enforce_file + name: "Enforce lightweight Dependabot config for Go projects" + def: + apply_if_file: go.mod + file: ".github/dependabot.yml" + content: | + version: 2 + updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + - type: enforce_file + name: "Enforce lightweight Dependabot config for JavaScript projects" + def: + apply_if_file: package.json + file: ".github/dependabot.yml" + content: | + version: 2 + updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + - type: enforce_file + name: "Enforce lightweight Dependabot config for Python projects" + def: + apply_if_file: requirements.txt + file: ".github/dependabot.yml" + content: | + version: 2 + updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10