Skip to content

Instantly share code, notes, and snippets.

@dontpaniclabsgists
Created September 23, 2022 20:31
Show Gist options
  • Save dontpaniclabsgists/b4bedb269830bdf74184e947c9c543cd to your computer and use it in GitHub Desktop.
Save dontpaniclabsgists/b4bedb269830bdf74184e947c9c543cd to your computer and use it in GitHub Desktop.
name: 'Dependabot -- $(Date:yyyyMMdd)$(Rev:.r)'
jobs:
- job: 'Dependabot'
pool:
# requires macos or ubuntu (windows is not supported)
vmImage: 'ubuntu-latest'
# Vars to be passed to the docker image
variables:
- name: DIRECTORY_PATH
value: /frontend/frontend-app
- name: PACKAGE_MANAGER
value: npm_and_yarn
- name: PROJECT_PATH
value: {ORG}/_git/{REPO}
steps:
# Get the repo
- script: git clone https://github.com/dependabot/dependabot-script.git
displayName: Clone Dependabot config repo
# Build the docker image
- script: |
cd dependabot-script
docker build -t "dependabot/dependabot-script" -f Dockerfile .
displayName: Build Dependabot Image
# Pass your vars to the docker image and execute
- script: |
docker run --rm -e AZURE_ACCESS_TOKEN=$SYSTEM_ACCESSTOKEN \
-e PACKAGE_MANAGER='$(PACKAGE_MANAGER)' \
-e PROJECT_PATH='$(PROJECT_PATH)' \
-e DIRECTORY_PATH='$(DIRECTORY_PATH)' \
-e BRANCH=develop \
-e GITHUB_ACCESS_TOKEN=$GITHUB_ACCESSTOKEN \
dependabot/dependabot-script
env:
SYSTEM_ACCESSTOKEN: $(System.AccessToken)
GITHUB_ACCESSTOKEN: $(GITHUB_PUBLIC_TOKEN)
displayName: Run Dependabot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment