fix(ci): snyk workflow should not run on dependabot or forked pull re…

…quests Signed-off-by: Nathan Klick <nathan@swirldslabs.com>
hashgraph · Dec 7, 2023 · a203ec6 · a203ec6
1 parent 644fd5e
commit a203ec6
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/node-flow-pull-request-checks.yaml b/.github/workflows/node-flow-pull-request-checks.yaml
@@ -214,6 +214,7 @@ jobs:
   snyk-scan:
     name: Snyk Scan
     uses: ./.github/workflows/node-zxc-compile-application-code.yaml
+    if: ${{ github.actor != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository }}
     with:
       custom-job-label: Standard
       enable-unit-tests: false