add: dependabot proxy workflow trigger

i-dot-ai · Apr 16, 2024 · 180e4e7 · 180e4e7
1 parent 39098d1
commit 180e4e7
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/.github/workflows/build-gh.yml b/.github/workflows/build-gh.yml
@@ -4,6 +4,15 @@ on:
   push:
     branches:
       - "**"
+    branches-ignore:
+      - "dependabot/**"
+
+  # Runs build workflow when dependabot PR is completed
+  # so that secrets can be accessed
+  workflow_run:
+    workflows: ["Dependabot PR Check"]
+    types:
+      - completed
 
 
 jobs:

diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
@@ -0,0 +1,12 @@
+### .github/workflows/dependabot_pr.yml
+### This workflow doesn't have access to secrets and has a read-only token
+name: Dependabot PR Check
+on:
+  push
+
+jobs:
+  check-dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - run: echo "PR created by Dependabot"