build: add dependabot

Author: BoxBoxJason

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  # Configuration for Golang
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Configuration for Docker
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"

Containerfile

@@ -15,7 +15,7 @@ ENV GO111MODULE=on \
 RUN go mod tidy && \
     go build -ldflags "-X 'main.version=${VERSION}'" -o /app/bin/gitlab-sync ./cmd/main.go
 
-FROM alpine:latest as security_provider
+FROM alpine:3.22.0 as security_provider
 
 RUN addgroup -S gitlab-sync \
     && adduser -S gitlab-sync -G gitlab-sync