From 7f56296f3296a16d73553f9d510b435a1c15e73a Mon Sep 17 00:00:00 2001
From: James Alseth <james@jalseth.me>
Date: Sun, 26 Nov 2023 15:44:09 -0800
Subject: [PATCH] ci: Have Dependabot auto-update upstream parser libraries
 (#886)

Signed-off-by: James Alseth <james@jalseth.me>
---
 .github/dependabot.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 94b647c63c..24ce85d061 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,19 @@ updates:
   - package-ecosystem: "gomod"
     directory: "/"
     allow:
+      # OPA
       - dependency-name: "github.com/open-policy-agent/opa"
+      # Upstream Parsers
+      - dependency-name: "cuelang.org/go"
+      - dependency-name: "github.com/BurntSushi/toml"
+      - dependency-name: "github.com/CycloneDX/cyclonedx-go"
+      - dependency-name: "github.com/cpuguy83/dockercfg"
+      - dependency-name: "github.com/go-ini/ini"
+      - dependency-name: "github.com/google/go-jsonnet"
+      - dependency-name: "github.com/hashicorp/hcl"
+      - dependency-name: "github.com/magiconair/properties"
+      - dependency-name: "github.com/spdx/tools-golang"
+      - dependency-name: "github.com/subosito/gotenv"
     schedule:
       interval: "daily"