ci: add trivy group for dependabot (#6908)

aquasecurity · Jun 13, 2024 · 04ed5ed · 04ed5ed
1 parent fdf799e
commit 04ed5ed
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -21,6 +21,8 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    ignore:
+      - dependency-name: "github.com/aquasecurity/trivy-*" ## `trivy-*` dependencies are updated manually
     groups:
       aws:
         patterns:
@@ -33,5 +35,7 @@ updates:
         patterns:
           - "github.com/testcontainers/*"
       common:
+        exclude-patterns:
+          - "github.com/aquasecurity/trivy-*"
         patterns:
           - "*"