don't run normal workflows when dependabot is making the update

KilleenCode / brancato

A cross-platform omnibar to to easily run workflows, built in Rust 🦀

MIT License

5 stars 2 forks source link

Closed SeanKilleen closed 2 years ago

SeanKilleen commented 2 years ago

Supports #86.

RyKilleen commented 2 years ago

Would love to be able to auto release on these sorts of updates, I'll have to noodle on it

SeanKilleen commented 2 years ago

@RyKilleen not recommended to auto-release on Dependabot updates due to the potential for supply chain attacks.

SeanKilleen commented 2 years ago

@RyKilleen though to be clear, you can set up auto-merge on the PRs themselves, where it'll merge as soon as the builds complete successfully.