Does not run on Dependabot PRs

Open
#2,858 3 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
25/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Stale
Tech stack
github-actions
Domain
ci-cd, security

Research direction

Start with the Default Setup requirements documentation linked in the issue and the referenced community discussion to understand the Dependabot limitation and current error behavior. Define the intended configuration, the expected result for Dependabot pull requests, and whether documentation or error-message changes are also required; the issue is done when the behavior is specified and covered by the repository's relevant checks.

Written by the indexing model from the issue text.

Description

Hi! I recently started using CodeQL for checking my GitHub Actions via the Default Setup. I also use Dependabot for version management. I noticed on my Dependabot PRs that I was seeing the CodeQL jobs fail with the following error:

Image

This was not occurring on PRs I made myself. After searching, I found this community discussion which explains that the default setup will not run jobs on Dependabot PRs.

I would appreciate having the ability to configure the default setup to run these jobs on Dependabot PRs, as this makes it difficult to require the job in a branch ruleset. At the very least, I would love better documentation of this limitation and a change in the error message to make it clearer what the issue is.

Thanks so much!

Dominant language
TypeScript
Stars
1.6k
Forks
493
Avg merge
1d 13h
Merged PRs (30d)
44

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from github/codeql-action

All issues in github/codeql-action

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.