cisagov / cisagov/development-guide

Skeleton script incorrectly modifies Dependabot configuration

Open
#90 0 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
Python
Stars
282
Forks
72
PR merge metrics
No merged PRs in 30d

Description

# 🐛 Summary #

The `project_setup/scripts/skeleton` script incorrectly replaces the name of the parent skeleton repository with the name of the new repository being created. This happens in the file `.github/dependabot.yml`.

For an example see the "before" [here](https://github.com/cisagov/ansible-role-crowdstrike/commit/fac0bc63b1185e341e1093456a38e460320b5ff1), paying special attention to the repository mentioned in the comment.

## To reproduce ##

Steps to reproduce the behavior:

1. Use the `project_setup/scripts/skeleton` script to create from the `skeleton-ansible-role` skeleton repository a new repository named `ansible-role-new`.
1. Observe that `cisagov/skeleton-ansible-role` has been incorrectly replaced with `cisagov/ansible-role-new` in a comment in `.github/dependabot.yml`.

## Expected behavior ##

The `skeleton` script should leave `.github/dependabot.yml` unaltered, apart from possibly uncommenting the Dependabot ignore directives that are managed by the parent repository.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.