[CI] added dependabot config (openvinotoolkit#29)

* added dependabot config

* removed empty dirs

* fixed sdl post-commit

* pull_request

.github/dependabot.yml

@@ -0,0 +1,33 @@
+# See help here: https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/enabling-and-disabling-version-updates
+
+version: 2
+updates:
+  #
+  # Python dependencies
+  #
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "09:00"
+      timezone: "Europe/Dublin"
+    open-pull-requests-limit: 3
+    assignees:
+      - "apaniukov"
+      - "mryzhov"
+    versioning-strategy: increase-if-necessary
+
+  #
+  # Github actions - CI
+  #
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "09:00"
+      timezone: "Europe/Dublin"
+    assignees:
+      - "apaniukov"
+      - "mryzhov"
+      - "ilya-lavrenov"
+    open-pull-requests-limit: 3

.github/workflows/sdl.yml

@@ -54,6 +54,7 @@ jobs:
           scan-ref: '.'
 
       - name: Dependency Review
+        if: ${{ github.event_name == 'pull_request' }}
         uses: actions/dependency-review-action@v4
         with:
           config-file: './.github/dependency_review.yml'