Enable dependabot to track container images in AttackSurfaceAnalyzer Dockerfile#27097
Enable dependabot to track container images in AttackSurfaceAnalyzer Dockerfile#27097
Conversation
Co-authored-by: adityapatwardhan <12820925+adityapatwardhan@users.noreply.github.com> Agent-Logs-Url: https://github.com/PowerShell/PowerShell/sessions/8ce2427b-f164-4608-8d42-3eff795017c5
There was a problem hiding this comment.
Pull request overview
This PR updates Dependabot configuration so Docker base images referenced by tools/AttackSurfaceAnalyzer/docker/Dockerfile are included in automated dependency update checks.
Changes:
- Add a
dockerecosystem update entry for/tools/AttackSurfaceAnalyzer/dockeron the default branch. - Add a second
dockerecosystem update entry intended to targetrelease/*branches for the same directory.
| - package-ecosystem: "docker" | ||
| directory: "/tools/AttackSurfaceAnalyzer/docker" | ||
| target-branch: "release/*" | ||
| schedule: | ||
| interval: daily |
There was a problem hiding this comment.
target-branch does not support wildcard patterns like release/* (it’s treated as a literal branch name), so Dependabot won’t open PRs against your release branches with this config. To update multiple release branches, list each release branch explicitly with its own updates entry (or remove target-branch if you only intend to update the default branch).
There was a problem hiding this comment.
@copilot fix the wild cards to point to release/v7.4 release/v7.5 and release/v7.6
There was a problem hiding this comment.
Done in 6d6e18d. Replaced the release/* wildcard with three explicit entries for release/v7.4, release/v7.5, and release/v7.6.
…nches Agent-Logs-Url: https://github.com/PowerShell/PowerShell/sessions/e43f8181-c353-4aeb-b499-05e4461ac0cf Co-authored-by: TravisEz13 <10873629+TravisEz13@users.noreply.github.com>
TravisEz13
added
the
CL-Tools
The Dockerfile at
tools/AttackSurfaceAnalyzer/docker/Dockerfilewas not covered by dependabot's Docker update configuration, leaving its base images (mcr.microsoft.com/dotnet/sdkandmcr.microsoft.com/windows/nanoserver) untracked.Changes
.github/dependabot.yml: Added newdockerupdate entries for/tools/AttackSurfaceAnalyzer/docker— one for the default branch and explicit entries targetingrelease/v7.4,release/v7.5, andrelease/v7.6— mirroring the existing pattern for root-level Docker entries.🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.