Skip to content

Added e2e nuget example for Azure DevOps#26

Open
matthewalltop wants to merge 1 commit into
dependabot:mainfrom
matthewalltop:azure-devops-example
Open

Added e2e nuget example for Azure DevOps#26
matthewalltop wants to merge 1 commit into
dependabot:mainfrom
matthewalltop:azure-devops-example

Conversation

@matthewalltop

Copy link
Copy Markdown

Added a working example for using Dependabot CLI with Azure Devops Pipelines.

  • Config file for nuget.
  • Azure Pipelines yaml
  • create-pull-requests.sh script - adapted from create.sh in this repo.

Feel free to propose changes or adjust directly!

@matthewalltop matthewalltop requested a review from a team as a code owner July 29, 2025 13:34
@brettfo

brettfo commented Jul 6, 2026

Copy link
Copy Markdown

Hi @matthewalltop, this PR just came across my radar. As I understand it, the example pipeline will download and run the CLI, publish the result file as an artifact, and a separate stage will extract the result contents and create a PR? If so, I only have once piece of feedback around detecting if the content is base64 encoded. The script checks for only base64-encoded characters and verifies the length, but each item under updated-dependency-files might have a content-encoding property. If this is missing it's assumed to be utf-8 but if it's explicitly base64 then you can trust that. It might make the detection a little cleaner, but ultimately I don't have strong feelings either way.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants