From a4987c9c71b115ed5ae590b426408bb86fd5a207 Mon Sep 17 00:00:00 2001 From: Tabby Cromarty Date: Tue, 24 Sep 2024 15:01:20 +0100 Subject: [PATCH] Remove private repositories from Dependabot config This is a public repo that shouldn't need access to GoCardless' private repositories and doesn't have the tokens with which to access them --- .github/dependabot.yml | 23 ----------------------- 1 file changed, 23 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d584054..4a84c68 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,22 +1,4 @@ version: 2 -registries: - docker-registry-eu-gcr-io: - type: docker-registry - url: https://eu.gcr.io - username: _json_key - password: "${{secrets.DOCKER_REGISTRY_EU_GCR_IO_PASSWORD}}" - - github-org-private: - type: git - url: https://github.com - username: x-access-token - password: "${{secrets.GIT_HUB_ROBOT_TOKEN}}" - - github-org-ruby-private: - type: rubygems-server - url: https://rubygems.pkg.github.com/gocardless - username: gocardless-robot-readonly - password: "${{secrets.GIT_HUB_ROBOT_TOKEN}}" updates: - package-ecosystem: bundler @@ -25,13 +7,8 @@ updates: interval: daily open-pull-requests-limit: 10 insecure-external-code-execution: allow - registries: - - github-org-private - - github-org-ruby-private - package-ecosystem: docker directory: "/" schedule: interval: daily open-pull-requests-limit: 10 - registries: - - docker-registry-eu-gcr-io