Skip to content
This repository was archived by the owner on Sep 22, 2025. It is now read-only.

Conversation

@GrantBirki
Copy link
Contributor

This pull request updates Go modules in this project and fixes up the dependabot config

Will resolve: https://github.com/github/actions-oidc-debugger/security/dependabot/1

Copilot AI review requested due to automatic review settings July 2, 2025 05:14
@GrantBirki GrantBirki requested a review from a team as a code owner July 2, 2025 05:14
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Copy link

@Shaeli Shaeli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it expected that it changes the dependabot config from weekly to monthly?

Also. I'm not sure if the auth to ghcr docker registry for the base image will still work if you delete this part of the dependabot config?

registries:
  ghcr:
    type: "docker-registry"
    url: "ghcr.io"
    username: "PAT"
    password: "${{secrets.CONTAINER_BUILDER_TOKEN}}"

@GrantBirki
Copy link
Contributor Author

@Shaeli yep all expected changes!

This project is actually open source so we are just using a basic Dockerfile and not pulling anything from our internal registries -> https://github.com/github/actions-oidc-debugger/blob/main/Dockerfile

@GrantBirki GrantBirki merged commit 36a60c3 into main Jul 3, 2025
6 checks passed
@GrantBirki GrantBirki deleted the updates branch July 3, 2025 16:08
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants