GHA/checksrc: extend zizmor to Dependabot, set cooldown periods

Closes #19216

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bd5661bea41a5417ddd36f017bfebe968e0ec3c3..a6b58f1e6254acb6a41165822dff0be9204e33f6 100644 (file)
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,8 @@ updates:
     directory: '/'
     schedule:
       interval: 'monthly'
+    cooldown:
+      default-days: 7
     commit-message:
       prefix: 'GHA:'
 
@@ -17,5 +19,10 @@ updates:
       - '/tests'
     schedule:
       interval: 'monthly'
+    cooldown:
+      default-days: 7
+      semver-major-days: 15
+      semver-minor-days: 7
+      semver-patch-days: 3
     commit-message:
       prefix: 'GHA:'

diff --git a/.github/workflows/checksrc.yml b/.github/workflows/checksrc.yml
index bd930f8ff1ff88341a20855bbdeccd089df47462..05dcc2ec91d6fe213db0c0ef86092b1bdf9a6a2a 100644 (file)
--- a/.github/workflows/checksrc.yml
+++ b/.github/workflows/checksrc.yml
@@ -135,7 +135,7 @@ jobs:
           GH_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
         run: |
           eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
-          zizmor --pedantic .github/workflows/*.yml
+          zizmor --pedantic .github/workflows/*.yml .github/dependabot.yml
 
       - name: 'shellcheck CI'
         run: |