don't run gpg and quay steps if dependabot made the change (#6508)

Signed-off-by: Bryce Palmer <[email protected]>

Author: everettraven

.github/workflows/deploy.yml

@@ -48,7 +48,7 @@ jobs:
         go-version: 1.19
 
     - name: gpg init
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       run: .ci/gpg/create-keyring.sh
       env:
         GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
@@ -82,7 +82,7 @@ jobs:
       uses: docker/setup-buildx-action@v2
 
     - name: quay.io login
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       uses: docker/login-action@v2
       with:
         username: ${{ secrets.QUAY_USERNAME }}
@@ -128,7 +128,7 @@ jobs:
       uses: docker/setup-buildx-action@v2
 
     - name: quay.io login
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       uses: docker/login-action@v2
       with:
         username: ${{ secrets.QUAY_USERNAME }}