diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8e3bcd44..0e7dccd8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,7 +5,23 @@ updates: directory: "/" schedule: interval: "weekly" + ignore: + - dependency-name: "github.com/aquasecurity/trivy-*" ## `trivy-*` dependencies are updated manually + groups: + docker: + patterns: + - "github.com/docker/*" + common: + exclude-patterns: + - "github.com/aquasecurity/trivy-*" + patterns: + - "*" - package-ecosystem: github-actions directory: / schedule: interval: "monthly" + groups: + github-actions: + patterns: + - "*" +