mirror of
https://github.com/anchore/syft.git
synced 2026-03-29 21:23:24 +02:00
chore(deps): ignore some dependabot deps (#4696)
Prevent some packages from being updated. Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com>
This commit is contained in:
parent
f68a7cc899
commit
c5114fd745
5
.github/dependabot.yml
vendored
5
.github/dependabot.yml
vendored
@ -23,6 +23,11 @@ updates:
|
||||
open-pull-requests-limit: 10
|
||||
labels:
|
||||
- "dependencies"
|
||||
ignore:
|
||||
- dependency-name: "github.com/aquasecurity/go-pep440-version"
|
||||
- dependency-name: "github.com/aquasecurity/go-version"
|
||||
- dependency-name: "github.com/knqyf263/go-apk-version"
|
||||
- dependency-name: "github.com/knqyf263/go-deb-version"
|
||||
groups:
|
||||
go-minor-patch:
|
||||
applies-to: version-updates # security updates get individual PRs
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user