-
Notifications
You must be signed in to change notification settings - Fork 556
Open
Labels
CIRelated to our continuous integration service (GitHub Actions)Related to our continuous integration service (GitHub Actions)
Description
We currently have dependabot scanning enabled on the whole repo due to Intel policy, and I manually mark anything in test/ as invalid since we're not installing or using that code, those are just lock files and other component lists used to test the vulnerability scanner.
When we complete our move to a new github org, we shouldn't need to keep doing this and should be able to reconfigure dependabot so it's no longer scanning anything in test/
but especially not anything in the language test files.
So this is just a reminder that we should do that after the move is complete. We could also disable dependabot scanning entirely (since we have our own scans) but I'd rather not do that, I just want it to only target stuff that actually matters.
Metadata
Metadata
Assignees
Labels
CIRelated to our continuous integration service (GitHub Actions)Related to our continuous integration service (GitHub Actions)