From 9f51393124a295f22b91f8cac513a25ac924fb4c Mon Sep 17 00:00:00 2001 From: Joe Esquibel Date: Sun, 26 Jul 2026 21:28:13 -0400 Subject: [PATCH] Remove invalid "security" label from dependabot.yml Dependabot was failing to open PRs with a "labels could not be found: security" config error. The generic "security" label collides with this repo's own vuln:*/threat:*/appsec taxonomy (this project is itself a security scanner), so rather than recreating it, drop it from both ecosystems. The per-ecosystem labels (python/github-actions) already provide the granularity, and GitHub auto-applies "dependencies" to Dependabot PRs regardless of this config. --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a9181dce..21746e4c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,7 +7,6 @@ updates: cooldown: default-days: 7 labels: - - "security" - "github-actions" - package-ecosystem: "pip" @@ -17,5 +16,4 @@ updates: cooldown: default-days: 7 labels: - - "security" - "python"