From 6610ae75ef2e017a2dc754eec5056505ce06e03e Mon Sep 17 00:00:00 2001 From: Francesco Novy Date: Tue, 29 Oct 2024 10:01:36 +0100 Subject: [PATCH 1/2] Revert "chore: Don't run dependabot on CodeQL PRs (#14109)" This reverts commit 09826558f793ebc27879096a0c69792ef90e5b87. --- .github/workflows/codeql-analysis.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c3a36e5a34f7..73ce7ec1f698 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -14,9 +14,6 @@ name: 'CI: CodeQL' on: push: branches: [develop] - branches-ignore: - # Ignore dependabot branches - - "dependabot/**" pull_request: # The branches below must be a subset of the branches above branches: [develop] From 549e58c80426a9d8754d52d059c4d982d3f1ddce Mon Sep 17 00:00:00 2001 From: Francesco Novy Date: Tue, 29 Oct 2024 10:06:19 +0100 Subject: [PATCH 2/2] ci: Do not run CodeQL for pushes from dependabot --- .github/workflows/codeql-analysis.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 73ce7ec1f698..2901d92ee12c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -33,6 +33,8 @@ jobs: analyze: name: Analyze runs-on: ubuntu-latest + # Skip for pushes from dependabot, which is not supported + if: github.event_name == 'pull_request' || github.actor != 'dependabot[bot]' strategy: fail-fast: false