add dependabot.yml file (#64)

Co-authored-by: jlimbu <[email protected]>

.github/dependabot.yml

@@ -0,0 +1,8 @@
+---
+version: 2
+
+updates:
+  - package-ecosystem: "npm"
+    directory: .
+    schedule:
+      interval: monthly

.github/dependencytrack.yml

@@ -0,0 +1,17 @@
+name: Dependency-Track Scan
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+jobs:
+  scan:
+    name: Scan Project Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Install Dependency-Track CLI
+        run: npm install -g @dependencytrack/cli