Force connection HTTPS, proxy-inversé, WSGI de production, reset cookie de conncection à chaque reconnection, limite sur les mdp, fichiers et One on One par minute, verification d'injection de SQL dans les champs d'entrées. renommage des fichiers lors du téléchargement, fichier de backup quotidien pour la bd et j'ai oublié quelque chose :(
40 lines
931 B
YAML
40 lines
931 B
YAML
# Dependabot configuration for automated dependency updates
|
|
#
|
|
# Dependabot creates PRs when dependencies have new versions,
|
|
# helping keep the application secure and up-to-date.
|
|
|
|
version: 2
|
|
updates:
|
|
# Python dependencies (pip)
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
time: "09:00"
|
|
timezone: "America/Toronto"
|
|
# Group all updates into a single PR
|
|
groups:
|
|
python-dependencies:
|
|
patterns:
|
|
- "*"
|
|
# Limit open PRs to avoid overwhelm
|
|
open-pull-requests-limit: 5
|
|
# Labels for PRs
|
|
labels:
|
|
- "dependencies"
|
|
- "security"
|
|
# Assign reviewer
|
|
reviewers:
|
|
- "cedrick2711"
|
|
|
|
# GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
time: "09:00"
|
|
timezone: "America/Toronto"
|
|
labels:
|
|
- "dependencies"
|
|
- "ci" |