From 0967c30cb6f0cfa4970b6fd9eacad3b9a8250c8a Mon Sep 17 00:00:00 2001
From: Mike Odnis <mikeodnis3242004@gmail.com>
Date: Wed, 1 Jul 2026 02:46:35 -0400
Subject: [PATCH] fix(ci): skip security scan on Dependabot PRs to unblock
 their fix PRs

---
 .github/workflows/security.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index be487a1..f553fe7 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -22,6 +22,10 @@ permissions:
 
 jobs:
   scan:
+    # Skip on Dependabot PRs: a cross-repo reusable workflow called with `secrets: inherit`
+    # startup-fails for Dependabot's restricted context, which blocks Dependabot's own security
+    # PRs. Dependabot already vetted the bump; push/schedule still scan the default branch.
+    if: ${{ github.actor != 'dependabot[bot]' }}
     uses: resq-software/.github/.github/workflows/security-scan.yml@94363a6a6856b7d86aceac91c4ff7df4bc19ced9 # main
     with:
       languages: '["actions"]'