Stepsecurity remediation 1726530247

.github/builder/Dockerfile

@@ -1,5 +1,5 @@
 # hadolint global ignore=DL3033,SC3044
-FROM fedora:20
+FROM fedora:20@sha256:5d5a02b873d298da9bca4b84440c5cd698b0832560c850d92cf389cef58bc549
 
 ENV PATH="${PATH}:/root/.cargo/bin/"
 

.github/dependabot.yml

@@ -0,0 +1,56 @@
+version: 2
+updates:
+  - package-ecosystem: docker
+    directory: /.github/builder
+    schedule:
+      interval: daily
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /examples/manual-example
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /examples/tutorials/edk2-simics-platform
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /examples/tutorials/edk2-uefi
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /examples/tutorials/risc-v-kernel
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /tests/rsrc/riscv-64
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /tests/rsrc/x86_64-breakpoint-uefi-edk2
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /tests/rsrc/x86_64-timeout-uefi-edk2
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /tests/rsrc/x86_64-uefi-edk2
+    schedule:
+      interval: daily