Build: Don't run CI push workflows for dependabot branches

Without this change, dependabot PRs run double checks - one set for the `push`
part and one for the `pull_request` part.

Closes gh-5353
This commit is contained in:
Michał Gołębiowski-Owczarek 2023-11-13 18:18:20 +01:00 committed by GitHub
parent b1e66a5faa
commit 635cb152e7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 3 deletions

View File

@ -1,8 +1,9 @@
name: "Code scanning - action" name: "Code scanning - action"
on: on:
push:
pull_request: pull_request:
push:
branches-ignore: "dependabot/**"
schedule: schedule:
- cron: '0 4 * * 6' - cron: '0 4 * * 6'
@ -30,7 +31,7 @@ jobs:
# the head of the pull request instead of the merge commit. # the head of the pull request instead of the merge commit.
- run: git checkout HEAD^2 - run: git checkout HEAD^2
if: ${{ github.event_name == 'pull_request' }} if: ${{ github.event_name == 'pull_request' }}
# Initializes the CodeQL tools for scanning. # Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5 uses: github/codeql-action/init@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5

View File

@ -1,6 +1,9 @@
name: CI name: CI
on: [push, pull_request] on:
pull_request:
push:
branches-ignore: "dependabot/**"
permissions: permissions:
contents: read # to fetch code (actions/checkout) contents: read # to fetch code (actions/checkout)