chore: run if not dependabot or if the dependabot check passed and has been triggered by workflow_run

leggetter · leggetter · commit c726679fdcbe · 2024-12-19T15:05:19.000Z
diff --git a/.github/workflows/dependabot_pr.yml b/.github/workflows/dependabot_pr.yml
@@ -0,0 +1,12 @@
+### .github/workflows/dependabot_pr.yml
+### This workflow doesn't have access to secrets and has a read-only token
+name: Dependabot PR Check
+on:
+  pull_request
+
+jobs:
+  check-dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - run: echo "PR created by Dependabot"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,9 +1,11 @@
 name: test
 
 on:
-  pull_request_target:
-    types:
-      - opened
+  workflow_run:
+    workflows: ["Dependabot PR Check"]
+    types: 
+      - completed
+  pull_request:
     branches:
       - main
 
@@ -29,6 +31,7 @@ jobs:
 
   build-linux:
     runs-on: ubuntu-latest
+    if: ${{ github.actor != 'dependabot[bot]' || github.event.workflow_run.conclusion == 'success' }}
     env:
       # https://goreleaser.com/customization/docker_manifest/
       DOCKER_CLI_EXPERIMENTAL: "enabled"
