Dependabot for new workflow (#59)

* Add dependabot to keep GHA up to date * Change current uses to poin to forked repo --------- Co-authored-by: Taras Dzhuryn <[email protected]>
voltrondata · Jan 23, 2024 · 335c77d · 335c77d
1 parent 90a7678
commit 335c77d
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,12 @@
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  # Maintain dependencies for docker
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/deploy-api-client.yml b/.github/workflows/deploy-api-client.yml
@@ -25,7 +25,7 @@ jobs:
     - name: Checkout Repository
       uses: actions/checkout@v4
 
-    - uses: alex-ac/github-action-ssh-docker-compose@master
+    - uses: matiasnu/github-action-ssh-docker-compose@7fb3aa789f898b63c3722e6beb2dafa1a70f0e22 # v2.0.3
       name: Docker-Compose Remote Deployment
       with:
         ssh_host: ${{ secrets.DEPLOY_HOST_DNS }}