marocchino/validate-dependabot

validate dependabot yaml

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Mar 13, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: marocchino/validate-dependabot@d8ae5c0d03dd75fbd0ad5f8ab4ba8101ebbd4b37 # v3.0.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
pathpath of dependabot yaml fileyes.github/dependabot.yml
success_messagedisplay on successyes✅dependabot config looks good 👍
failure_messagedisplay on failureyes���� dependabot errors

no outputs