Skip PR review workflow for Dependabot PRs

Dependabot PRs don't have access to the secrets required by the
cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing
the org membership check to fail with "github-token not supplied".

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
This commit is contained in:
Guillaume Lours 2026-03-26 13:13:01 +01:00 committed by Guillaume Lours
parent e5c6b9c3b7
commit 7aeb90c9a3

View file

@ -12,6 +12,10 @@ permissions:
jobs:
review:
if: >-
github.event_name == 'issue_comment' ||
github.event_name == 'pull_request_review_comment' ||
github.event.pull_request.user.login != 'dependabot[bot]'
uses: docker/cagent-action/.github/workflows/review-pr.yml@dba0ca51938c78afb363625363c50582243218d6 # v1.3.1
# Scoped to the job so other jobs in this workflow aren't over-permissioned
permissions: