From e518d638f26a19b69198e9f4e6c1ac6cca3c29fd Mon Sep 17 00:00:00 2001
From: Mike Dalessio <mike@37signals.com>
Date: Tue, 17 Mar 2026 18:27:45 -0400
Subject: [PATCH] ci: suppress dependabot-execution warning in dependabot
 config

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 98fbe1973..e6ce4f9b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,7 +12,7 @@ updates:
     registries:
       - github-basecamp
     directory: "/"
-    insecure-external-code-execution: allow
+    insecure-external-code-execution: allow # zizmor: ignore[dependabot-execution] -- required for Bundler to resolve gems from the private github-basecamp registry
     open-pull-requests-limit: 10
     vendor: false
     groups: