fix(ci): disable dependency review in forks (#599)

Correction to ensure that the “Dependency Review” job is only run in the project's original repository. Fix: 8cb9fc2. Fix: 9fe355a. Signed-off-by: Claudio André <[email protected]>
openwall · Nov 15, 2024 · 63870ec · 63870ec
1 parent 886e499
commit 63870ec
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -54,7 +54,12 @@ jobs:
             api.securityscorecards.dev:443
             github.com:443
 
-      - name: "Checkout Repository"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: "Dependency Review"
-        uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0
+      - name: Dump GitHub context
+        env:
+          GITHUB_CONTEXT: ${{ toJson(github) }}
+        run: echo "$GITHUB_CONTEXT"
+
+      # - name: "Checkout Repository"
+      #   uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      # - name: "Dependency Review"
+      #   uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0