Repository navigation
Conversation
daily dependabot job was failing e.g., https://github.com/flutter/platform_tests/network/updates/1614131092 If someone adds a workflow in the future, they can add this back in.
The old URL 404s without a redirect. Replaced it with a working one.
zizmor flags Dependabot's default 3-day cooldown, recommending a 7-day
cooldown to give time for problems with a new release to be caught
before it is proposed, so running it reports, for each pub entry,
something like:
warning[dependabot-cooldown]: insufficient cooldown in Dependabot updates
--> .github/dependabot.yml:18:5
|
18 | - package-ecosystem: "pub"
| ^^^^^^^^^^^^^^^^^^^^^^^^ missing cooldown configuration
|
= note: audit confidence → High
= note: this finding has an auto-fix
= help: audit documentation → https://docs.zizmor.sh/audits/#dependabot-cooldown
This commit is the change generated by `zizmor --fix=safe` and matches
the fix in flutter/packages#12708.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
github-actionsentry. Remove non-functional scorecard workflow #233 removed the repository's last GitHub Actions workflow, so this entry has nothing to update and its daily Dependabot job fails example.Changes under
.github/are test-exempt.Pre-launch Checklist
I signed the CLA.///).I added new tests to check the change I am making, orthis PR is test-exempt.All existing and new tests are passing.If you need help, consider asking for advice on the #hackers-new channel on Discord.