Skip to content

Skip the policy job on Dependabot pull requests - #17

Open
boeboe wants to merge 1 commit into
mainfrom
fix/policy-skip-dependabot
Open

boeboe wants to merge 1 commit into
mainfrom
fix/policy-skip-dependabot

Conversation

@boeboe

@boeboe boeboe commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Dependabot runs get no Actions secrets, so OTFABRIC_READ_TOKEN is empty and Policy fails with an authentication error downloading otfabric-policy from the private engineering repository. It first showed on otfabric/opcua-interop#49.

The job now skips on Dependabot PRs, the same way it skips on forks. The push to main still runs it after the merge. The token is not added as a Dependabot secret, because a bumped action would run with it before review. This is the same text as otfabric/opcua-interop#51 and the template in otfabric/engineering#42.

This PR's own Policy job has to run and pass, which checks the non-Dependabot path. The skip itself can only be seen on a Dependabot PR.

🤖 Generated with Claude Code

Dependabot runs get no Actions secrets, so OTFABRIC_READ_TOKEN is empty and
the download of otfabric-policy from the private engineering repository
fails with an authentication error. The push to main still runs the check
after the merge.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant