diff --git a/.github/dependabot.yml b/.github/dependabot.yml index de0e1e1..8d33757 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,8 +3,12 @@ updates: - package-ecosystem: "composer" directory: "/" schedule: - interval: "daily" + interval: "monthly" versioning-strategy: widen + groups: + symfony: + patterns: + - "symfony*" labels: - "RFR" - "dependencies" diff --git a/.github/workflows/security.gh-action.yaml b/.github/workflows/security.gh-action.yaml deleted file mode 100644 index 821f4fe..0000000 --- a/.github/workflows/security.gh-action.yaml +++ /dev/null @@ -1,15 +0,0 @@ -name: Security checks - Github Action - -on: - pull_request: - paths: [.github/workflows/**] - -jobs: - ci_harden_security: - name: Ensure SHA pinned actions - runs-on: ubuntu-latest - steps: - - name: Fetch lastest changes - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # renovate: tag=v3.0.0 - - name: Ensure SHA pinned actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@a397475397837fb57396bd18f09d991625e604fe # renovate: tag=v1.2.0