Issue #110: Minor text edits to improve readability. Update dependabo…

…t GH action with latest from Python SK.
NASA-AMMOS · Mar 19, 2024 · 8eb5bf2 · 8eb5bf2
1 parent 1e3b8e5
commit 8eb5bf2
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/docs/guides/software-lifecycle/security/github-security/README.md b/docs/guides/software-lifecycle/security/github-security/README.md
@@ -48,14 +48,19 @@ If you do not have organizational permissions or if you wish to customize securi
      - For added security, we suggest turning on Dependabot security updates to automatically generate pull requests for known vulnerabilities in your dependencies.
      - We also recommend enabling Dependabot version updates _if you are using a package manager for your project_. This will help you keep your dependencies up-to-date. To configure Dependabot version updates:
        1. Create a `.github/dependabot.yml` file in your repository.
-       2. Specify the package-ecosystem, directory, and schedule for the updates. For example:
+       2. Specify the package-ecosystem, directory, schedule and branch to update. For example (from the [Slim Python Starter Kit](https://github.com/NASA-AMMOS/slim-starterkit-python/blob/main/.github/dependabot.yml)):
           ```yml
           version: 2
           updates:
-            - package-ecosystem: "npm"
-              directory: "/"
+            - package-ecosystem: 'pip'
+              directory: '/' # location of package manifests
               schedule:
-                interval: "daily"
+                interval: 'daily'
+                time: '09:00'
+                timezone: 'America/Los_Angeles'
+              target-branch: 'main'
+              labels:
+                - 'dependencies'
           ```
    - To view Dependabot alerts and version updates:
      - Head back to the main page of your repository.