{"id":28373986,"url":"https://github.com/dependabot/example-cli-usage","last_synced_at":"2026-03-05T14:31:12.946Z","repository":{"id":292185386,"uuid":"976783835","full_name":"dependabot/example-cli-usage","owner":"dependabot","description":"Demonstrates how to self-host Dependabot :dependabot:","archived":false,"fork":false,"pushed_at":"2025-05-08T21:50:19.000Z","size":36,"stargazers_count":30,"open_issues_count":4,"forks_count":26,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-01-21T22:32:12.697Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dependabot.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-02T18:37:56.000Z","updated_at":"2026-01-20T05:12:08.000Z","dependencies_parsed_at":"2025-06-25T18:34:04.094Z","dependency_job_id":"6979c87e-8ac1-4058-9072-1c355a1e4afd","html_url":"https://github.com/dependabot/example-cli-usage","commit_stats":null,"previous_names":["dependabot/example-cli-usage"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/dependabot/example-cli-usage","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dependabot%2Fexample-cli-usage","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dependabot%2Fexample-cli-usage/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dependabot%2Fexample-cli-usage/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dependabot%2Fexample-cli-usage/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dependabot","download_url":"https://codeload.github.com/dependabot/example-cli-usage/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dependabot%2Fexample-cli-usage/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30130318,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-05T12:40:50.676Z","status":"ssl_error","status_checked_at":"2026-03-05T12:39:32.209Z","response_time":93,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-29T20:38:10.606Z","updated_at":"2026-03-05T14:31:12.917Z","avatar_url":"https://github.com/dependabot.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n    \u003cpicture\u003e\n        \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://user-images.githubusercontent.com/7659/174594540-5e29e523-396a-465b-9a6e-6cab5b15a568.svg\"\u003e\n        \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://user-images.githubusercontent.com/7659/174594559-0b3ddaa7-e75b-4f10-9dee-b51431a9fd4c.svg\"\u003e\n        \u003cimg src=\"https://user-images.githubusercontent.com/7659/174594540-5e29e523-396a-465b-9a6e-6cab5b15a568.svg\" alt=\"Dependabot\" width=\"336\"\u003e\n    \u003c/picture\u003e\n\u003c/div\u003e\n\n# Example Dependabot CLI Usage\n\nThis repo serves as an example of how to use Dependabot CLI for updates. It is intended as a starting point for advanced users to run a self-hosted version of Dependabot within their own projects.\n\nFor a hassle-free Dependabot experience, check out the hosted [Dependabot Service](https://docs.github.com/en/github/administering-a-repository/about-dependabot-version-updates).\n\nThis repo uses an Action which downloads and runs Dependabot CLI. To run the Action you would go to [the Action in the Actions tab](https://github.com/dependabot/example-cli-usage/actions/workflows/example.yml), and run it.\n\nTo see what the results look like, go check out the Pull Requests.\n\nWhile this example repo runs on GitHub Actions, none of the Dependabot bits are specific to GitHub, so it should be straightforward to port it to any other CI system.\n\n## Implementation details\n\nThe Action is defined at [.github/workflows/example.yml](.github/workflows/example.yml).\n\nIt contains two jobs, the first downloads and runs Dependabot CLI. The inputs for the CLI runs are in [.github/dependabot](.github/dependabot). See the [Dependabot CLI repo](https://github.com/dependabot/cli) for more info on inputs such as credentials and groupings. \n\nThe results are redirected to a file and uploaded as artifacts.\n\nThe second job downloads the artifact and creates PRs from it using the script [create.sh](create.sh).\n\nThe reason there are two jobs is Dependabot CLI should only run with read-only tokens as some ecosystems may execute arbitrary code. To achieve that in Actions we must use two jobs with `permissions` defined differently.\n\nAlso take a look at the [Dependabot Smoke Tests repo](https://github.com/dependabot/smoke-tests/tree/main/tests) for example inputs and expected outputs.\n\n## Where can I go for help?\n\nIf you are having issues with the updates to a specific ecosystem, head over to [dependabot-core](https://github.com/dependabot/dependabot-core).\n\nIf there is a problem with running the Dependabot CLI, report that in the [CLI repo](https://github.com/dependabot/cli).\n\nWe do not provide direct support for the scripts and workflows in this repo, this is only to serve as an example.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdependabot%2Fexample-cli-usage","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdependabot%2Fexample-cli-usage","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdependabot%2Fexample-cli-usage/lists"}