From 7ddfc8365383f9886cb13a8b7f0686fe9bd63380 Mon Sep 17 00:00:00 2001 From: aallier Date: Mon, 29 Jan 2024 11:23:06 +0100 Subject: [PATCH] fix: EB-26588 Decrease periodicity --- .github/dependabot.yml | 6 +++++- .github/workflows/security.gh-action.yaml | 15 --------------- 2 files changed, 5 insertions(+), 16 deletions(-) delete mode 100644 .github/workflows/security.gh-action.yaml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index de0e1e1..8d33757 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,8 +3,12 @@ updates: - package-ecosystem: "composer" directory: "/" schedule: - interval: "daily" + interval: "monthly" versioning-strategy: widen + groups: + symfony: + patterns: + - "symfony*" labels: - "RFR" - "dependencies" diff --git a/.github/workflows/security.gh-action.yaml b/.github/workflows/security.gh-action.yaml deleted file mode 100644 index 821f4fe..0000000 --- a/.github/workflows/security.gh-action.yaml +++ /dev/null @@ -1,15 +0,0 @@ -name: Security checks - Github Action - -on: - pull_request: - paths: [.github/workflows/**] - -jobs: - ci_harden_security: - name: Ensure SHA pinned actions - runs-on: ubuntu-latest - steps: - - name: Fetch lastest changes - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # renovate: tag=v3.0.0 - - name: Ensure SHA pinned actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@a397475397837fb57396bd18f09d991625e604fe # renovate: tag=v1.2.0