wpscanteam / wpscan / 29106139294

95%

push

github

Add 7-day Dependabot cooldown and limit Actions to major versions (#2072)

- Set a default 7-day cooldown on all ecosystems to mitigate supply
  chain attacks (malicious releases are typically caught/yanked within
  days).
- Ignore semver-minor/patch updates for github-actions so PRs are only
  opened for new major versions, cutting noise since minor/patch Action
  bumps don't change functionality in a way that's relevant to us.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2068 of 2563 branches covered (80.69%)

4662 of 4904 relevant lines covered (95.07%)

17334.6 hits per line