mirror of
https://github.com/trailofbits/buttercup
synced 2026-06-21 14:11:39 +00:00
Dan Guido
c32fe7a767
Consolidate and improve GitHub Actions workflows: Deleted redundant/outdated workflows: - claude-code-review.yml - No longer used - claude.yml - No longer used - pre-commit.yml - Merged into static-checks.yml Renamed for clarity: - comp-integration.yml → component-integration.yml - integration.yml → system-integration.yml New workflows: - static-checks.yml - Comprehensive static analysis (shellcheck, hadolint, actionlint) Improvements: - Add actionlint configuration (.github/actionlint.yaml) - Update dependabot configuration with cooldown settings - Improve workflow concurrency settings - Pin actions to SHA hashes for security - Add better job dependencies and caching Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
27 lines
528 B
YAML
27 lines
528 B
YAML
version: 2
|
|
|
|
updates:
|
|
- package-ecosystem: pip
|
|
directory: /
|
|
groups:
|
|
python:
|
|
patterns:
|
|
- "*"
|
|
schedule:
|
|
interval: weekly
|
|
# Supply chain security: delay updates to allow community vetting
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
groups:
|
|
actions:
|
|
patterns:
|
|
- "*"
|
|
schedule:
|
|
interval: weekly
|
|
# Supply chain security: delay updates to allow community vetting
|
|
cooldown:
|
|
default-days: 7
|