agate

commit 57e4054cbeb1922354a5b7b2c0301afcf9792d84
parent 7cb0696f3f03509c6c13984b54562cf9ce23dc28
Author: j-k <dev@j-k.io>
Date:   Tue, 19 Oct 2021 17:33:11 +0100

remove perms and ignore dependabot prs for cargo audit check (#84)

It's meant to only run on commits on master but just to be safe
Diffstat:
M
.github/workflows/cargo-audit.yml
 | 
5
+++--

1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml
@@ -6,13 +6,14 @@ on:
       - "**/Cargo.lock"
   schedule:
     - cron: "0 14 * * *" # 14:00 UTC
-permissions:
-  repository-projects: read
 jobs:
   cargo-audit:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - uses: actions-rs/audit-check@v1
+        # Don't run on dependabot PRs or forks
+        # https://github.com/actions-rs/clippy-check/issues/2#issuecomment-807852653
+        if: github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]'
         with:
           token: ${{ secrets.GITHUB_TOKEN }}