Hello, Would someone with admin credentials to the

pact-foundation

be able to help me with regards to dependabots? I'm currently the maintainer for https://github.com/pact-foundation/pact-broker-chart and as an advocate of securing software supply chains, I wanted to do a couple of things over the next week or so around achieving this in mainly 2 areas. 1. Enable dependabot version and security updates https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates - I can't enable it on the helm chart project itself, so this is why I might need someone with organisation priviledges to look into it - unless of course this would cause problems elsewhere 2. I want to push the OCI Helm Artifacts to the container registry that would come with github. So if folks wanted to install the Pact Broker onto Kubernetes using the Helm Chart, they can do so by using the new OCI format that is offered by

ghcr

(I can also sign these OCI artifacts using

cosign

which will give people the peace of mind that it's coming from the right place). Both of the above queries I believe needs running by an admin to do, so thought I'd float it in this channel to get some traction.

I can help Chris!

Awesome, thank you very much @Matt (pactflow.io / pact-js / pact-go) I'll give it a try

Are you talking about packages? I might have to do a little more research. All the options are checked 🤷‍♂️

I haven't tried packages yet, I only tried to see if the dependabot was available in the security settings for the repo

ah! Looks like I need to explicitly add you. Done. Could you please try again?

Nope nothing yet 😢

Yep! I’ve just made the group admin. I don’t know what else I can do if this doesn’t work!

Ahh there we go! A wild dependabot button appears 😆

Awesome! No worries. So TL;DR - make people admins 😛

It seems so 😛