1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Do not run CodeQL on dependabot PRs

Browse Source
This commit is contained in:
Takashi Kokubun 2022-10-16 22:44:15 -07:00
parent 0d7292ec73
commit fb6a9656a1
No known key found for this signature in database
GPG Key ID: 6FFC433B12EE23DD
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/codeql-analysis.yml vendored
View File

@ -25,7 +25,8 @@ jobs:
# CodeQL runs on ubuntu-latest and windows-latest
runs-on: ubuntu-latest
if: ${{ !contains(github.event.head_commit.message, '[DOC]') && !contains(github.event.pull_request.labels.*.name, 'Documentation') }}
# CodeQL fails to run pull requests from dependabot due to missing write access to upload results.
if: ${{ !contains(github.event.head_commit.message, '[DOC]') && !contains(github.event.pull_request.labels.*.name, 'Documentation') && github.event.head_commit.pusher.name != 'dependabot[bot]' }}
env:
enable_install_doc: no