diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..09b165b --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,2 @@ +/.github/ @preprio/security-team +.trivyignore @preprio/security-team diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1230149..798a80e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,7 @@ version: 2 updates: - - package-ecosystem: "github-actions" + - package-ecosystem: "npm" directory: "/" + target-branch: "develop" schedule: interval: "daily" diff --git a/.github/workflows/code_review.yml b/.github/workflows/code_review.yml deleted file mode 100644 index d287426..0000000 --- a/.github/workflows/code_review.yml +++ /dev/null @@ -1,10 +0,0 @@ -name: Auto Code Review - -on: - pull_request: - types: [opened, synchronize, reopened] - -jobs: - conflicts: - uses: preprio/.github-workflows/.github/workflows/code-conflicts.yml@main - secrets: inherit