disable SonarQube analysis for dependabot PRs

- reason: actions created from dependabot PRs do not have access to secrets
vitruv-tools · Dec 19, 2024 · ded203c · ded203c
1 parent 2a5f0fc
commit ded203c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -85,6 +85,7 @@ jobs:
     name: SonarQube analysis
     runs-on: ubuntu-latest
     needs: [verify]
+    if: github.actor != 'dependabot[bot]'
     strategy:
       fail-fast: true