diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index a67fc99f..e48df739 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -24,7 +24,6 @@ jobs: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} container: image: semgrep/semgrep - if: github.actor != 'dependabot[bot]' steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - run: semgrep ci --sarif --output semgrep.sarif @@ -37,7 +36,6 @@ jobs: codeql: name: Analyze (${{ matrix.language }}) runs-on: blacksmith-4vcpu-ubuntu-2404 - if: github.actor != 'dependabot[bot]' permissions: security-events: write packages: read @@ -67,7 +65,6 @@ jobs: container: name: Build and Push runs-on: blacksmith-4vcpu-ubuntu-2404 - if: github.actor != 'dependabot[bot]' permissions: contents: read packages: write @@ -94,7 +91,6 @@ jobs: container-scan: needs: [container] - if: github.actor != 'dependabot[bot]' name: ${{ matrix.scanner.name }} Scan runs-on: blacksmith-4vcpu-ubuntu-2404 strategy: