Skip to content

Commit 2697e42

Browse files
committed
Use a token dedicated to Dependabot
The automatic token is not available to Dependabot.
1 parent 5b7538a commit 2697e42

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

.github/dependabot.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,12 @@ version: 2
1616
registries:
1717
# Authenticate to GitHub for higher API rate limits
1818
# https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api
19-
# https://docs.github.com/en/actions/how-tos/security-for-github-actions/security-guides/automatic-token-authentication
2019
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#git
2120
github:
2221
type: git
2322
url: https://github.com
2423
username: x-access-token
25-
password: ${{ secrets.GITHUB_TOKEN }}
24+
password: ${{ secrets.DEPENDABOT_TOKEN }}
2625

2726
updates:
2827
- package-ecosystem: github-actions

0 commit comments

Comments
 (0)