GH-500 · Question #110
Which Dependabot configuration fields are required? Each answer presents part of the solution. (Choose three.)
The correct answer is A. package-ecosystem C. schedule.interval D. directory. When configuring Dependabot via the dependabot.yml file, the following fields are mandatory for each update configuration: [D] directory: Specifies the location of the package manifest within the repository. This tellsDependabot where to look for dependency files. [A]…
Question
Which Dependabot configuration fields are required? Each answer presents part of the solution. (Choose three.)
Options
- Apackage-ecosystem
- Ballow
- Cschedule.interval
- Ddirectory
- Emilestone
How the community answered
(33 responses)- A94% (31)
- B3% (1)
- E3% (1)
Explanation
When configuring Dependabot via the dependabot.yml file, the following fields are mandatory for each update configuration: [D] directory: Specifies the location of the package manifest within the repository. This tellsDependabot where to look for dependency files. [A] package-ecosystem: Indicates the type of package manager (e.g., npm, pip, maven) used in the specified directory. [C] schedule.interval: Defines how frequently Dependabot checks for updates (e.g., daily, weekly). This ensures regular scanning for outdated or vulnerable dependencies. [Not E] The milestone field is optional and used for associating pull requests with milestones. The allow field is also optional and used to specify which dependencies to update.
Topics
Community Discussion
No community discussion yet for this question.