mirror of
https://github.com/MaSzyna-EU07/StarterNG.git
synced 2026-10-16 23:49:19 +02:00
c1c47f746e
Actions pinned to full commits, no token left in the checkout, no binaries from a fork's pull request among the artifacts, the version passed through the environment, an audit of the NuGet packages, time limits, one release at a time with checksums and never over another commit's release, and Dependabot for the actions and packages.
15 lines
391 B
YAML
15 lines
391 B
YAML
# Pull requests for new versions of the pinned actions and of the NuGet packages,
|
|
# so a fix for a vulnerability reaches the build without anyone watching for it.
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
|
|
- package-ecosystem: nuget
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|