fix(lambda): Prevent scale-up lambda from starting runner for user repo if org level runners is enabled #7930
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Auto approve dependabot | |
| # Warning: The pull_request_target event is granted a read/write repository | |
| # token and can access secrets, even when it is triggered from a fork. Although | |
| # the workflow runs in the context of the base of the pull request, you should | |
| # make sure that you do not check out, build, or run untrusted code from the | |
| # pull request with this event. Additionally, any caches share the same scope as | |
| # the base branch, and to help prevent cache poisoning, you should not save the | |
| # cache if there is a possibility that the cache contents were altered. | |
| on: pull_request_target | |
| jobs: | |
| approve: | |
| if: github.actor == 'dependabot[bot]' || github.actor == 'dependabot-preview[bot]' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363 # ratchet:hmarr/[email protected] | |
| with: | |
| github-token: "${{ secrets.GITHUB_TOKEN }}" |