don't run gpg and quay steps if dependabot made the change (#6508)

Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
operator-framework · Jul 21, 2023 · 799d6b1 · 799d6b1
1 parent da88378
commit 799d6b1
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -48,7 +48,7 @@ jobs:
         go-version: 1.19
 
     - name: gpg init
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       run: .ci/gpg/create-keyring.sh
       env:
         GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
@@ -82,7 +82,7 @@ jobs:
       uses: docker/setup-buildx-action@v2
 
     - name: quay.io login
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       uses: docker/login-action@v2
       with:
         username: ${{ secrets.QUAY_USERNAME }}
@@ -128,7 +128,7 @@ jobs:
       uses: docker/setup-buildx-action@v2
 
     - name: quay.io login
-      if: github.event_name != 'pull_request'
+      if: ${{ github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' }}
       uses: docker/login-action@v2
       with:
         username: ${{ secrets.QUAY_USERNAME }}