Discrepancies in cli vs GitHub Actions

[sblatnick]

Discrepancies with Dependabot running in Github Actions vs running dependabot/cli have been a pain point in our integrating dependabot consistently for scanning our projects.

For example, dependabot/cli uses a job.yaml that differs from the format of .github/dependabot.yml

This is a feature request to make the formats of these yaml configs match, and any other ways we could get the scans to be more similar.

[jeffwidman]

For the specific request re: dependabot.yml, that's already tracked here, so please 👍 that issue if you want it:

• Feature request: use config from dependabot.yml #279

For the more general case, yeah, I understand what you're asking for, and sorry for the pain here. It's something we'd certainly like to standardize a bit more, although the reality is it's unlikely to happen anytime soon as there's a bunch of other stuff that's higher priority.