Repository custom runner settings for Dependabot
Repository administrators can now configure the runner type, custom labels, and runner groups for Dependabot version and security updates, extending existing runner configuration capabilities.
As a repository administrator, you can now configure the runner type, optional custom label, and optional runner group for Dependabot version and security updates. This extends the runner configuration already available at the organization level, giving you more control over where each repository’s Dependabot jobs run.
Labeled runners can target both self-hosted and larger GitHub-hosted runners suited to your project’s needs, such as access to private package registries or specialized environments.
These repository-level settings are available for private and internal repositories on github.com. The controls are hidden for public repositories and on GitHub Enterprise Server.
To get started, open your repository settings and select Advanced Security. Under “Dependency scanning”, find “Dependabot version updates”, then edit Runner type. Choose Labeled runner, then optionally enter a custom label and runner group. If you do not specify a label, Dependabot uses the dependabot label. Alternatively, choose Standard GitHub runner to use the default GitHub-hosted environment.
Security configurations do not currently enforce Dependabot runner settings.
Check out the docs to learn more about using custom labels with self-hosted runners and managing Dependabot on self-hosted runners.
The post Repository custom runner settings for Dependabot appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
Improved detection for withdrawn Dependabot alerts
Dependabot now provides improved detection for withdrawn alerts that are no longer valid due to advisory or vulnerability changes. This makes it easier to identify and manage alerts that have been removed.
Search and filter for budgets now available
The Budgets and alerts page in GitHub billing settings now displays all budgets in a single searchable and filterable list, making it easier to manage multiple budgets.
Code scanning AI Scan metrics in security overview
Organization and enterprise administrators can now view metrics showing AI Scan findings generated and resolved in the security overview dashboard, providing visibility into the impact of AI-powered code scanning on pull requests.