cisagov / cisagov/development-guide
Skeleton script incorrectly modifies Dependabot configuration
- Dominant language
- Python
- Stars
- 282
- Forks
- 72
- PR merge metrics
- No merged PRs in 30d
Description
# 🐛 Summary #
The `project_setup/scripts/skeleton` script incorrectly replaces the name of the parent skeleton repository with the name of the new repository being created. This happens in the file `.github/dependabot.yml`.
For an example see the "before" [here](https://github.com/cisagov/ansible-role-crowdstrike/commit/fac0bc63b1185e341e1093456a38e460320b5ff1), paying special attention to the repository mentioned in the comment.
## To reproduce ##
Steps to reproduce the behavior:
1. Use the `project_setup/scripts/skeleton` script to create from the `skeleton-ansible-role` skeleton repository a new repository named `ansible-role-new`.
1. Observe that `cisagov/skeleton-ansible-role` has been incorrectly replaced with `cisagov/ansible-role-new` in a comment in `.github/dependabot.yml`.
## Expected behavior ##
The `skeleton` script should leave `.github/dependabot.yml` unaltered, apart from possibly uncommenting the Dependabot ignore directives that are managed by the parent repository.
Contributor guide
Assessment
This issue has not been assessed yet.