Skip to content

Commit 0982655

Browse files
authored
chore: Don't run dependabot on CodeQL PRs (#14109)
We get failures when running dependabot on CodeQL PRs: https://github.com/getsentry/sentry-javascript/actions/runs/11561736812/job/32181414647 ``` Warning: Resource not accessible by integration Error: Resource not accessible by integration Warning: Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. See https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#scanning-on-push for more information on how to configure these events. ``` Given dependabot is not going to change any code (just deps), I think we are safe to remove CodeQL scanning.
1 parent 6410841 commit 0982655

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/codeql-analysis.yml

+3
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ name: 'CI: CodeQL'
1414
on:
1515
push:
1616
branches: [develop]
17+
branches-ignore:
18+
# Ignore dependabot branches
19+
- "dependabot/**"
1720
pull_request:
1821
# The branches below must be a subset of the branches above
1922
branches: [develop]

0 commit comments

Comments
 (0)