Running dependabot on ARC

[danpowell88]

I see now github has enabled dependabot on self hosted runners if you added a label to the runners, does this extend out to ARC runners. I don't see any way to add labels (using the newer ARC functionality).

[galoniz]

did someone tried it and have it running?

[da1910]

I was able to get this running using Runner Scale Sets, using the dind container mode. Depending on your Kubernetes environment and image policies you may need to override some of the configuration (for example if you need a custom tag for your dind container)

You need to deploy the set with the exact name dependabot which means you can only have one, either at repository level or shared across the org.

See #3340

[galoniz]

how can you tell it's working? I do not see any mention in the dependabot section regarding the host it runs at, can you please advise?

I have created it with the right label:

but I do not see any logs on the runner itself

[da1910]

Have you activated the setting to allow dependabot to run using Actions infrastructure? It's also possible it doesn't support runner groups (I did not assign dependabot to a group)

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/about-dependabot-on-github-actions-runners