Merge pull request #5356 from charles-chenzz/deps

update dependabot to enable CVE detect
kubernetes-sigs · Nov 9, 2023 · 68e0997 · 68e0997
2 parents e7c8ed1 + a7e065d
commit 68e0997
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,3 +4,11 @@ updates:
   directory: "/"
   schedule:
       interval: "weekly"
+
+- package-ecosystem: gomod
+  directory: "/"
+  schedule:
+    interval: "weekly"
+  open-pull-requests-limit: 10
+  vulnerability-alerts:
+    enabled: true