From 8495d35e1ff6b07a3a5d4ef910daa9d222dc836f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Antun=20Fla=C5=A1?= Date: Mon, 6 Jul 2026 17:35:30 +0200 Subject: [PATCH] Create dismiss-dev-only-dependabot-alerts.yml --- .../dismiss-dev-only-dependabot-alerts.yml | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/dismiss-dev-only-dependabot-alerts.yml diff --git a/.github/workflows/dismiss-dev-only-dependabot-alerts.yml b/.github/workflows/dismiss-dev-only-dependabot-alerts.yml new file mode 100644 index 0000000..c9a7b87 --- /dev/null +++ b/.github/workflows/dismiss-dev-only-dependabot-alerts.yml @@ -0,0 +1,22 @@ +name: Dismiss Dependabot alerts for dependencies not used in production + +on: + schedule: + - cron: "0 6 * * 1" # Monday 06:00 UTC + workflow_dispatch: + inputs: + dry-run: + type: boolean + default: true + description: "When true, decisions are logged to the job summary but no alerts are dismissed." + +jobs: + dismiss: + permissions: + contents: read + uses: infinum/android-github-actions-workflows/.github/workflows/dismiss-dev-only-dependabot-alerts.yml@main + with: + dry-run: ${{ inputs.dry-run || false }} + client-id: ${{ vars.DEPENDABOT_DISMISSER_BOT_APP_ID }} + secrets: + app-private-key: ${{ secrets.DEPENDABOT_DISMISSER_BOT_PRIVATE_KEY }}