Force dependabot to scan my github repo without open PRs
Asked Answered
D

2

11

I have dependabot enabled in my GitHub repo.

However there is currently no open PR by it.

I in my repo the following message

Dependabot updates are paused We noticed you haven't used Dependabot in a while, so we've paused new pull requests for you. Merge a Dependabot pull request to resume automatically creating Dependabot updates or disable security and version updates. See open Dependabot pull requests

How can I force dependabot to run/scan my repo?

Dormie answered 27/7, 2023 at 19:30 Comment(0)
P
24

As mentioned by fbiville in reply to Akae Beka yesterday, and to complete Akae Beka's answer: You need to go to: Insights > Dependency Graph > Dependabot, and from there click on "Recent update jobs."

You should then see a "Check for updates" button on that page.

See screenshots of the "Recent update jobs" link and the "Check for updates" button.

Protactinium answered 17/11, 2023 at 13:53 Comment(1)
This might be good to know: once I committed a Dependabot config, it immediately kicked off an update job, so there's no need to trigger it manually in that case.Laborious
I
0

To manually run/scan the dependabot, go to Insights > Dependency Graph > Dependabot.

Github Dependabot

There you will be able to see your dependencies and the logs of the dependabot executions.

Hope this helps.

Insensate answered 27/7, 2023 at 20:2 Comment(3)
Still no option to trigger a Dependabot run, though? Or am I missing something?Machos
I couldn't tell you, I think that once configured it will perform the scan based on what is declared in your dependabot.yml file.Insensate
I was able to trigger Dependabot by following the path above. Then click on "Recent update jobs" and you should see a "Check for updates" call to action.Wend

© 2022 - 2024 — McMap. All rights reserved.