Skip to content

Commit f8e24af

Browse files
authored
Chore: [AEA-0000] - add dependabot approve schedule (#20)
Add Dependabot schedule to the repository
1 parent ac17a55 commit f8e24af

2 files changed

Lines changed: 58 additions & 51 deletions

File tree

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Auto-approve dependency updates
2+
3+
on:
4+
workflow_dispatch:
5+
schedule:
6+
- cron: '*/30 * * * *'
7+
8+
permissions: {}
9+
jobs:
10+
auto-approve-dependabot:
11+
runs-on: ubuntu-22.04
12+
environment: create_pull_request
13+
permissions:
14+
contents: write
15+
pull-requests: write
16+
steps:
17+
- name: Auto approve and enable auto-merge
18+
uses: NHSDigital/eps-dependabot-approve@da0503449b218ccd99bc547e242007d5514e4d2f
19+
with:
20+
AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
21+
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}

.github/workflows/pull_request.yml

Lines changed: 37 additions & 51 deletions
Original file line numberDiff line numberDiff line change
@@ -1,55 +1,41 @@
11
name: pull_request
2-
32
on:
4-
pull_request:
5-
branches: [ main ]
6-
3+
pull_request:
4+
branches: [main]
75
permissions: {}
8-
96
jobs:
10-
get_config_values:
11-
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
12-
permissions:
13-
attestations: "read"
14-
contents: "read"
15-
packages: "read"
16-
with:
17-
verify_published_from_main_image: false
18-
19-
dependabot-auto-approve-and-merge:
20-
uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
21-
permissions:
22-
contents: "write"
23-
pull-requests: "write"
24-
secrets:
25-
AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
26-
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
27-
28-
quality_checks:
29-
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
30-
permissions:
31-
contents: "read"
32-
packages: "read"
33-
id-token: "write"
34-
needs: [ get_config_values ]
35-
with:
36-
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
37-
secrets:
38-
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
39-
40-
pr_title_format_check:
41-
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
42-
permissions:
43-
pull-requests: "write"
44-
tag_release:
45-
needs: [ get_config_values ]
46-
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
47-
permissions:
48-
id-token: "write"
49-
contents: "write"
50-
packages: "write"
51-
with:
52-
dry_run: true
53-
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
54-
branch_name: ${{ github.event.pull_request.head.ref }}
55-
tag_format: ${{ needs.get_config_values.outputs.tag_format }}
7+
get_config_values:
8+
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
9+
permissions:
10+
attestations: "read"
11+
contents: "read"
12+
packages: "read"
13+
with:
14+
verify_published_from_main_image: false
15+
quality_checks:
16+
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
17+
permissions:
18+
contents: "read"
19+
packages: "read"
20+
id-token: "write"
21+
needs: [get_config_values]
22+
with:
23+
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
24+
secrets:
25+
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
26+
pr_title_format_check:
27+
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
28+
permissions:
29+
pull-requests: "write"
30+
tag_release:
31+
needs: [get_config_values]
32+
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
33+
permissions:
34+
id-token: "write"
35+
contents: "write"
36+
packages: "write"
37+
with:
38+
dry_run: true
39+
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
40+
branch_name: ${{ github.event.pull_request.head.ref }}
41+
tag_format: ${{ needs.get_config_values.outputs.tag_format }}

0 commit comments

Comments
 (0)