[Query] How to label Dependabot Security Alert PRs

[ejntaylor]

Dependabot creates two types of pull requests - standard version bumps and security vulnerability bumps.

Is there a way we can use your labeler action to add a specific 'security' label to the latter?

Thanks

[crazy-max]

@raisonon Not possible and not the purpose of this action. I think it has to be done on Dependabot side with a new attribute like security-labels. Suggest to leave an issue on their repo: https://github.com/dependabot/dependabot-core

[ejntaylor]

Thanks. For reference: dependabot/dependabot-core#3726