2GT-Rich
e43b80a9a2
- SECURITY.md with vulnerability disclosure policy and self-hosting guidance - Dependabot config for weekly dependency updates (npm, Docker, Actions) - ESLint v9 flat config for frontend and backend, with eslint-plugin-security - GitHub Actions CI: lint, typecheck, build, and npm audit on every push/PR - CodeQL workflow for automated security scanning (runs on push and weekly)
53 lines
1.1 KiB
YAML
53 lines
1.1 KiB
YAML
version: 2
|
|
updates:
|
|
# Frontend npm dependencies
|
|
- package-ecosystem: "npm"
|
|
directory: "/frontend"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- "dependencies"
|
|
- "frontend"
|
|
|
|
# Backend npm dependencies
|
|
- package-ecosystem: "npm"
|
|
directory: "/backend"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- "dependencies"
|
|
- "backend"
|
|
|
|
# Docker dependencies (docker-compose.yml base images)
|
|
- package-ecosystem: "docker"
|
|
directory: "/backend"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "docker"
|
|
|
|
- package-ecosystem: "docker"
|
|
directory: "/nginx"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "docker"
|
|
|
|
# GitHub Actions workflow dependencies
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "github-actions"
|