Skip to content

Commit d575d14

Browse files
committed
Add repository sanity check to dependabot workflow
It's safer this way
1 parent 8f4a145 commit d575d14

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/dependabot.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ permissions:
77
pull-requests: read
88
jobs:
99
build:
10-
if: ${{ github.actor == 'dependabot[bot]' }}
10+
if: ${{ github.actor == 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository }}
1111
runs-on: ubuntu-latest
1212
steps:
1313
- uses: actions/checkout@v3

0 commit comments

Comments
 (0)