Skip to content

Commit 3d150b8

Browse files
committed
Use pull_request_target to avoid showing on non-Dependabot PRs
The workflow was appearing as a (skipped) build step on every PR. Switching to pull_request_target prevents it from showing up at all on non-Dependabot PRs. https://claude.ai/code/session_012ieS3tLTHwwnh9aftVAPVY
1 parent d248dba commit 3d150b8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/dependabot-auto-merge.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
22
name: Dependabot auto-merge
3-
on: pull_request
3+
on: pull_request_target
44

55
permissions:
66
contents: write

0 commit comments

Comments
 (0)