hiko1129

<ul>
<li>registriesの追加</li>
<li>updatesからregistriesを参照</li>
<li>（registriesの追加のみだとblockとなるので）insecure-external-code-executionの追加</li>
</ul>
<div class="code-block-container"><pre><code>version: 2
registries:
  rubygems-github:
    type: rubygems-server
    url: https://rubygems.pkg.github.com
    token: ${{ secrets.XXX }}
updates:
  - package-ecosystem: bundler
    registries:
      - rubygems-github
    insecure-external-code-execution: allow
</code></pre></div><p>ref:</p>
<ul>
<li><a href="https://github.blog/changelog/2021-03-15-dependabot-private-registry-support-public-beta/" target="_blank" rel="nofollow noopener noreferrer">https://github.blog/changelog/2021-03-15-dependabot-private-registry-support-public-beta/</a></li>
<li><a href="https://docs.github.com/ja/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#insecure-external-code-execution" target="_blank" rel="nofollow noopener noreferrer">https://docs.github.com/ja/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#insecure-external-code-execution</a></li>
</ul>
<p>secretsは当然dependabot secrets側への登録が必要</p>
