diff --git a/content/code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md b/content/code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md index 41b0c4932d1b..8f08572128c9 100644 --- a/content/code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md +++ b/content/code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md @@ -43,7 +43,7 @@ The `dependabot.yml` file controls how {% data variables.product.prodname_depend ## Where to store the `dependabot.yml` file -You must store this file in the `.github` directory of your repository in the default branch (typically `main`). The path is: `.github/dependabot.yml`. +You must store this file in the `.github` directory of your repository in the default branch (typically `main`), at `.github/dependabot.yml` or `.github/dependabot.yaml`. ## How the `dependabot.yml` file works