fix: skipping semgrep for dependabot (#41)

splunk · Mar 28, 2022 · ddcbe35 · ddcbe35
1 parent d48e77a
commit ddcbe35
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/reusable-build-test-release.yml b/.github/workflows/reusable-build-test-release.yml
@@ -174,6 +174,7 @@ jobs:
   semgrep:
     runs-on: ubuntu-latest
     name: security-sast-semgrep
+    if: github.actor != 'dependabot[bot]'
     steps:
       - uses: actions/checkout@v2
       - name: Semgrep