diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml
index 52d79c1..b668c04 100644
--- a/.github/.OwlBot.lock.yaml
+++ b/.github/.OwlBot.lock.yaml
@@ -1,3 +1,17 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
 docker:
   image: gcr.io/cloud-devrel-public-resources/owlbot-python:latest
-  digest: sha256:f0e4b51deef56bed74d3e2359c583fc104a8d6367da3984fc5c66938db738828
+  digest: sha256:ed1f9983d5a935a89fe8085e8bb97d94e41015252c5b6c9771257cf8624367e6
+ 
diff --git a/owlbot.py b/owlbot.py
index 245ab3f..de2bcf1 100644
--- a/owlbot.py
+++ b/owlbot.py
@@ -109,7 +109,12 @@
     microgenerator=True,
     cov_level=98,
 )
-s.move(templated_files, excludes=[".coveragerc"])  # microgenerator has a good coveragerc
+s.move(templated_files,
+    excludes=[
+        ".coveragerc", # microgenerator has a good coveragerc
+        ".github/workflows", # exclude templated gh actions as tests require credentials
+        ]
+    )
 
 python.py_samples(skip_readmes=True)