From ddf3020762fbbbcbf072b2d3859ea61b851cf3ad Mon Sep 17 00:00:00 2001 From: Volodymyr Kolesnykov Date: Tue, 31 Oct 2023 18:50:53 +0200 Subject: [PATCH] ci: allow comments from PRs by Dependabot --- .github/actions/build-docker-image/action.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/actions/build-docker-image/action.yml b/.github/actions/build-docker-image/action.yml index 7d8655d3..77a21911 100644 --- a/.github/actions/build-docker-image/action.yml +++ b/.github/actions/build-docker-image/action.yml @@ -96,14 +96,14 @@ runs: format: template template: "@.github/actions/build-docker-image/markdown.tpl" output: trivy.md - if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name && github.event.sender.login != 'dependabot[bot]' + if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name - name: Security Scan uses: aquasecurity/trivy-action@master with: image-ref: ${{ inputs.primaryTag }} format: table - if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name || github.event.sender.login == 'dependabot[bot]' + if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name - name: Find Trivy Scan Report comment uses: peter-evans/find-comment@v2 @@ -111,7 +111,7 @@ runs: with: issue-number: ${{ github.event.pull_request.number }} body-includes: ${{ inputs.primaryTag }} - if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name && github.event.sender.login != 'dependabot[bot]' + if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name - name: Create or update comment uses: peter-evans/create-or-update-comment@v3 @@ -120,4 +120,4 @@ runs: issue-number: ${{ github.event.pull_request.number }} body-path: trivy.md edit-mode: replace - if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name && github.event.sender.login != 'dependabot[bot]' + if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name