Awesome/awesome-copilot
1
0
Fork 0
mirror of https://github.com/github/awesome-copilot.git synced 2026-06-15 20:34:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix uv ecosystem value in dependabot skill (#1990)

Browse Source 
* Fix uv ecosystem value in dependabot skill

Dependabot supports `uv` ecosystem. It should be used rather than `pip`.

https://docs.github.com/en/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories

* Add note to choose uv or pip for dependabot skill
This commit is contained in:
Jiro Matsuzawa
2026-06-15 09:56:29 +09:00
committed by GitHub
parent 8771f74e80
commit 71c55d4e12
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/dependabot/SKILL.md
+5 -2
View File
@@ -34,7 +34,8 @@ Scan the repository for dependency manifests. Look for:
| Ecosystem | YAML Value | Manifest Files | | Ecosystem | YAML Value | Manifest Files |
|---|---|---| |---|---|---|
| npm/pnpm/yarn | `npm` | `package.json`, `package-lock.json`, `pnpm-lock.yaml`, `yarn.lock` | | npm/pnpm/yarn | `npm` | `package.json`, `package-lock.json`, `pnpm-lock.yaml`, `yarn.lock` |
| pip/pipenv/poetry/uv | `pip` | `requirements.txt`, `Pipfile`, `pyproject.toml`, `setup.py` | | pip/pipenv/poetry | `pip` | `requirements.txt`, `Pipfile`, `pyproject.toml`, `setup.py` |
| uv | `uv` | `pyproject.toml`, `uv.lock` |
| Docker | `docker` | `Dockerfile` | | Docker | `docker` | `Dockerfile` |
| Docker Compose | `docker-compose` | `docker-compose.yml` | | Docker Compose | `docker-compose` | `docker-compose.yml` |
| GitHub Actions | `github-actions` | `.github/workflows/*.yml` | | GitHub Actions | `github-actions` | `.github/workflows/*.yml` |
@@ -57,7 +58,9 @@ Scan the repository for dependency manifests. Look for:
| Git Submodules | `gitsubmodule` | `.gitmodules` | | Git Submodules | `gitsubmodule` | `.gitmodules` |
| Pre-commit | `pre-commit` | `.pre-commit-config.yaml` | | Pre-commit | `pre-commit` | `.pre-commit-config.yaml` |
Note: pnpm and yarn both use the `npm` ecosystem value. Notes:
- pnpm and yarn both use the `npm` ecosystem value.
- Prefer `uv` ecosystem value when `uv.lock` is present; otherwise use `pip`.
### Step 2: Map Directory Locations ### Step 2: Map Directory Locations