From 84dd7eecdbc400eecf45d08307ff8f3172cf1d63 Mon Sep 17 00:00:00 2001 From: Domenico Sibilio Date: Thu, 25 Jan 2024 11:56:15 +0100 Subject: [PATCH] ACS-6650 Avoid running SAST scan on DependaBot PRs (#917) Skipping SAST scan on DependaBot PRs as it won't provide any additional insights and requires sharing more secrets with DependaBot than we're willing to. --- .github/workflows/ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4efef939..27fe648c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -57,6 +57,7 @@ jobs: runs-on: ubuntu-latest if: > (github.ref_name == 'master' || startsWith(github.ref_name, 'SP/') || startsWith(github.ref_name, 'HF/') || github.event_name == 'pull_request') && + github.actor != 'dependabot[bot]' && !contains(github.event.head_commit.message, '[skip tests]') steps: - uses: actions/checkout@v3