diff --git a/.github/workflows/preview_deploy_gcp.yml b/.github/workflows/preview_deploy_gcp.yml
index a699efe7dac..6bca3c73847 100644
--- a/.github/workflows/preview_deploy_gcp.yml
+++ b/.github/workflows/preview_deploy_gcp.yml
@@ -14,6 +14,10 @@ jobs:
   deploy:
     permissions: 
       pull-requests: write
+    # Secrets aren't available for Dependabot PR (because the updated
+    # dependencies might abuse them), so they don't have enough rights to
+    # do a preview deployment:
+    if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
diff --git a/.github/workflows/preview_deploy_gcp_cleanup.yml b/.github/workflows/preview_deploy_gcp_cleanup.yml
index abd92d82882..83acc461453 100644
--- a/.github/workflows/preview_deploy_gcp_cleanup.yml
+++ b/.github/workflows/preview_deploy_gcp_cleanup.yml
@@ -16,6 +16,10 @@ jobs:
   deploy:
     permissions: 
       pull-requests: write
+    # Secrets aren't available for Dependabot PR (because the updated
+    # dependencies might abuse them), so they don't have enough rights to
+    # do a preview deployment:
+    if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
     - name: Setup Cloud SDK