trinodb/trino
dependabot-originating builds fail due to lack of secrets
オープン
#28,176 opened on 2026/02/09
good first issuemaintenancetest
Repository metrics
- Stars
- (9,113 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
There is a problem with dependabot-initiated PR builds. The build attempt to run jobs requiring secrets and fails as the secrets are not found Example: https://github.com/trinodb/trino/actions/runs/21819342270/job/62948556703?pr=28175 (#28175)
My understanding is that dependabot-originated flows have access to repo vars, but they don't see repo secrets except those configured for dependabot itself. Given job conditions being has-var || has-secret, this leads to build failures.
proposed solution
Change job conditions to be "(has-var && !dependabot-originated) || has-secret"