Comments (3)
@gitfool Does user used by Dependabot has write access to repository? We use Dependabot with several repositories in our privately hosted Gitlab instance and Dependabot creates branches in original repository.
from dependabot-script.
I think you're asking about forking the https://github.com/dependabot/dependabot-script repo.
I'm just starting with this myself, but it looks like no you need to fork (or mirror) it yourself.
You create a new project that builds it into a Docker image itself.
I'm looking at that to save the time of bundle install -j $(nproc) --path vendor
for each pipeline.
I did plan a way to just include this in each project pipeline directly using include
.
This could possibly be direct from the GitHub repo (without a fork).
The downside I found was every project you scan would need your API token.
If you fork and schedule then only the bot project needs the token.
from dependabot-script.
This repo is primarily a collection of example scripts if you wish to run Dependabot outside of GitHub... it's a starting place, not expected to be production grade as users have all kinds of custom scenarios.
So forking in order to customize is almost inevitable. That said, there are some ways around that, as others have detailed above.
Closing, as nothing more to do here.
from dependabot-script.
Related Issues (20)
- Proposal for using the latest dependabot-core version HOT 2
- I'm trying to understand how to pass information to generic-update-script.rb for a private maven repository. HOT 3
- dependabot-script does not support the `lockfile-only` versioning strategy
- Dependabot Core version in Gemfile is still 0.209.0 HOT 1
- Make this repo easier to get going with AKA this repo isn't abandoned HOT 1
- Dependabot not working when running manually
- Guidance for Building Docker Image HOT 6
- How to populate OPTIONS environment variable HOT 5
- Enable Auto-Complete for Azure DevOps
- Update examples to use ecosystem specific images HOT 2
- How to do authentication for private feed when using docker image? HOT 4
- Fix for broken scripts timeframe HOT 3
- Only update minor and patch versions
- Increase timeout
- How to use private docker registry with dependabot-script? HOT 1
- Stuck scheduled
- Feature Request: Support Grouped Version Updates
- Need better handling of Octokit::TooManyRequests error
- Wrong Path to package manager
- Project status
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dependabot-script.