🐛 Fix Dependabot check to accept .yaml file extension (#1601)

ossf · Feb 3, 2022 · f84291d · f84291d
1 parent 5e1fd52
commit f84291d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/checks/raw/dependency_update_tool.go b/checks/raw/dependency_update_tool.go
@@ -43,7 +43,7 @@ func checkDependencyFileExists(name string, data fileparser.FileCbData) (bool, e
 	}
 
 	switch strings.ToLower(name) {
-	case ".github/dependabot.yml":
+	case ".github/dependabot.yml", ".github/dependabot.yaml":
 		*ptools = append(*ptools, checker.Tool{
 			Name: "Dependabot",
 			URL:  "https://github.com/dependabot",

diff --git a/checks/raw/dependency_update_tool_test.go b/checks/raw/dependency_update_tool_test.go
@@ -144,6 +144,14 @@ func TestDependencyUpdateTool(t *testing.T) {
 				".github/dependabot.yml",
 			},
 		},
+		{
+			name:    "dependency update tool",
+			wantErr: false,
+			want:    1,
+			files: []string{
+				".github/dependabot.yaml",
+			},
+		},
 		{
 			name:    "foo bar",
 			wantErr: false,