seahaven-external-dev-baseline/.github/dependabot.yml at 10555af9e274531174bbf85aa41886ae9f552590 - adam/seahaven-external-dev-baseline - Sea Haven Git

adam/seahaven-external-dev-baseline

Archived

This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa 10555af9e2 Add account-local security baseline for seahaven-external-dev

Stripped fork of seahaven-account-baseline for the isolated external-dev
account (396287094661). Single stack: AWS Config, GuardDuty, Security Hub
(FSBP + CIS v3.0), IAM Access Analyzer, VPC flow logs (VPC ids via context),
and a $200/mo budget alerting adam@seahaven.com.

Drops all org-level / prod-specific controls (local CloudTrail, CIS metric
alarms, WAF, SES, Bedrock, DynamoDB CMK, Backup) per the isolated-account
design; the org trail already covers this account centrally. Inspector2 is a
documented post-deploy CLI step (no CloudFormation enable resource exists).

2026-06-15 11:26:23 -04:00

15 lines

302 B

YAML

Raw Blame History

 version: 2
 updates:
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
     groups:
       minor-and-patch:
         update-types:
           - "minor"
           - "patch"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"