From 973b7844c3563671a29258899ad888a737f47af3 Mon Sep 17 00:00:00 2001 From: Mario Minardi Date: Mon, 15 Dec 2025 08:09:13 -0700 Subject: [PATCH] .github/workflows: disable integration tests for dependabot PRs Disable integration tests for dependabot PRs since it does not have access to the integration testing tailnet. Updates https://github.com/tailscale/corp/issues/33791 Signed-off-by: Mario Minardi --- .github/workflows/test.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index e3576f9..a7fc0ba 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -17,7 +17,12 @@ jobs: # Skip our integration tests if the PR is from a fork. This has the consequence of # disabling these even if the PR is from a forked repo into itself, but given that # these tests are very specific to our internal test environment that is a good thing. - if: ${{ !github.event.repository.fork }} + # + # Similarly, skip if this is running from a PR that has been opened by dependabot as + # the bot does not have credentials for the integration testing tailnet. + # TODO(mpminardi): revisit / remove this if / when we give dependabot a tailnet for + # testing with a smaller blast radius. + if: ${{ !github.event.repository.fork && github.actor != 'dependabot[bot]' }} name: ${{ matrix.os }} (${{ matrix.arch }}) (${{ matrix.credential-type }}) tailscale-${{ matrix.version }} strategy: fail-fast: false