Skip to content

ci: run the dependabot assignee on pull_request_target - #815

Merged
jennifer-takagi merged 2 commits into
mainfrom
ktlo/fix-dependabot-assignee-ip-allowlist
Oct 26, 2026
Merged

jennifer-takagi merged 2 commits into
mainfrom
ktlo/fix-dependabot-assignee-ip-allowlist

Conversation

@jennifer-takagi

@jennifer-takagi jennifer-takagi commented Oct 26, 2026 •

Copy link
Copy Markdown
Collaborator

No description provided.

The Dependabot-context GITHUB_TOKEN is not exempt from the org IP allow
list, so every run returned 403. pull_request_target runs in base-branch
context with a normal Actions token.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
github.actor is whoever triggered the event, so a human reopening a
Dependabot PR skipped the job. The PR author does not change.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@jennifer-takagi
jennifer-takagi merged commit 96ce150 into main Oct 26, 2026
1 check passed
@jennifer-takagi
jennifer-takagi deleted the ktlo/fix-dependabot-assignee-ip-allowlist branch October 26, 2026 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant