A similar tool to dependabot written by Salesforce: https://github.com/salesforce/dockerfile-image-update