Merge pull request #168 from target/safer-bot-check

Check github.repository in actor check for dependabot run

Author: colindean

.github/workflows/dependabot-automerge.yaml

@@ -8,7 +8,7 @@ permissions:
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
+    if: github.actor == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
     steps:
       - name: Dependabot metadata
         id: metadata