Avoid uploading eslint sarif for dependabot PR

Dependabot does not have `security-events: write` permission.s
This commit is contained in:
Andrew Eisenberg 2024-09-23 12:09:39 -07:00
parent ef130516b1
commit 9580b7e6d5
No known key found for this signature in database

View file

@ -30,7 +30,7 @@ jobs:
- name: Upload sarif
uses: github/codeql-action/upload-sarif@v3
# Only upload SARIF for the latest version of Node.js
if: "always() && matrix.node-types-version == 'current'"
if: "always() && matrix.node-types-version == 'current' && !startsWith(github.head_ref, 'dependabot/')"
with:
sarif_file: eslint.sarif
category: eslint