From d5fa49172a776266ab5c2656f8532f4586ddf073 Mon Sep 17 00:00:00 2001
From: modem7 <modem7@gmail.com>
Date: Wed, 23 Mar 2022 22:55:48 +0000
Subject: [PATCH] Create dependabot.yml

This will assist with version updates and vulnerability scans.

Dependabot scans will need to be enabled in the repo itself under https://github.com/AmruthPillai/Reactive-Resume/settings/security_analysis

It would also be worthwhile pairing this with Snyk (https://app.snyk.io/) for vulnerability monitoring.
---
 .github/dependabot.yml | 62 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..cf81e8da
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,62 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "docker" # See documentation for possible values
+    directory: "/server" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "docker" # See documentation for possible values
+    directory: "/client" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/client" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/server" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/schema" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/docs" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "github-actions"
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
\ No newline at end of file