Most of Apache Common's components' are happy users of Dependabot, which is used on our GitHub mirrored repositories.
Gary On Sun, Aug 29, 2021, 10:38 lewis john mcgibbney <lewi...@apache.org> wrote: > Hi builds@, > I was advised to ask my question here instead of general@incubator. > Thanks for any feedback > > > I understand that we cannot use automated tooling, specifically Dependbot > ( > > https://dependabot.com/) because it requests write access to the ASF > > project source code. > > I have found this functionality to be really useful and wondered if there > > are any suggestions out there for automating the dependency management > > workflow? > > Thanks for any feedback. > > lewismc > -- > http://home.apache.org/~lewismc/ > http://people.apache.org/keys/committer/lewismc >
