Added support for dependabot

[Akasurde]

What this PR does / why we need it:

• added support for dependabot

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #280

Additional information

Special notes for your reviewer

[anusha94]

@Akasurde
Thank you for the PR!
Trying to understand what this PR does. Please correct me if I'm wrong.

From the changes, it looks like the GH action will scan weekly for dependabot vulnerabilities in gomod? Is it also fixed automatically? As in, will it also raise a PR with the correct dependent versions?

[Akasurde]

From the changes, it looks like the GH action will scan weekly for dependabot vulnerabilities in gomod?

yes

Is it also fixed automatically? As in, will it also raise a PR with the correct dependent versions?

yes, dependabot will weekly check the dependencies and fix them using PR. We would require to review PR and merge it.
I kept scanning frequency weekly since we will not change dependencies daily. I can change it to daily if you defer to my opinion.

[anusha94]

@Akasurde

Thank you for the explanation! Weekly sounds good to me. Let's get this merged!

[dharmjit]

LGTM! Thanks for your contribution @Akasurde 🎉

[Akasurde]

@anusha94 @dharmjit Thanks for the review and merge.