Dependabot with Private Repos

dependabot.yml

version: 2
registries:
  git-all-orgs:
    type: git
    url: https://github.com
    username: im-pipeline-bot
    password: ${{secrets.READ_PKG_TOKEN}}
  npm-github-packages-all-orgs:
    type: npm-registry
    url: https://npm.pkg.github.com
    token: ${{secrets.READ_PKG_TOKEN}}
  public-nuget:
    type: nuget-feed
    url: https://api.nuget.org/v3/index.json
  im-enrollment:
    type: nuget-feed
    url: https://nuget.pkg.github.com/im-enrollment/index.json
    token: ${{secrets.READ_PKG_TOKEN}}
  im-platform:
    type: nuget-feed
    url: https://nuget.pkg.github.com/im-platform/index.json
    token: ${{secrets.READ_PKG_TOKEN}}
  im-practices:
    type: nuget-feed
    url: https://nuget.pkg.github.com/im-practices/index.json
    token: ${{secrets.READ_PKG_TOKEN}}

updates:
  # For configuration syntax see:
  # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

  - package-ecosystem: "github-actions"
    registries: "*"
    directory: "/"
    schedule:
      interval: "monthly"
      # Checks for updates at 3am EST every thursday
      time: "12:00"
    groups:
      github-action-dependencies:
        patterns:
          - "*"
    pull-request-branch-name:
      separator: "-"
    labels:
      - "skip-validation"
      - "skip-release"

  - package-ecosystem: "nuget"
    registries: "*"
    directory: "/"
    schedule:
      interval: "monthly"
      time: "12:00"
    groups:
      nuget-dependencies:
        patterns:
          - "*"
    pull-request-branch-name:
      separator: "-"
    labels:
      - "skip-validation"
      - "skip-release"

  - package-ecosystem: "npm"
    registries: "*"
    directory: "/"
    schedule:
      interval: "monthly"
      time: "12:00"
    groups:
      npm-dependencies:
        patterns:
          - "*"
    pull-request-branch-name:
      separator: "-"
    labels:
      - "skip-validation"
      - "skip-release"