ci: Allow Dependabot to update github.com/hashicorp/go-getter (#946)

Signed-off-by: James Alseth <james@jalseth.me>
open-policy-agent · Apr 29, 2024 · 298d74a · 298d74a
1 parent 28d92a4
commit 298d74a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -20,6 +20,8 @@ updates:
       - dependency-name: "github.com/moby/buildkit"
       - dependency-name: "github.com/spdx/tools-golang"
       - dependency-name: "github.com/subosito/gotenv"
+      # go-getter is used to fetch remote policies from various sources which occasionally has security fixes
+      - dependency-name: "github.com/hashicorp/go-getter"
     schedule:
       interval: "daily"