Exclude dependabot from Docker Hub pushes

cathive / concourse-sonarqube-resource

performs SonarQube analyses and checks quality gates https://concourse-ci.org/ https://sonarqube.org/

Apache License 2.0

46 stars 50 forks source link

Exclude dependabot from Docker Hub pushes #84

Closed headcr4sh closed 1 year ago

headcr4sh commented 1 year ago

Make sure that container images are not pushed to the docker registry if a workflow was started as a result of a pull request originated by dependabot.

See: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions

Also: The deprecated "::set-output" has been replaced, see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

holgerstolzenberg commented 1 year ago

@headcr4sh I guess the failing github action is the permission issue you want to look into?