good first issuemaintenancetest
倉庫指標
- 星標
- (9,113 顆星)
- PR 合併指標
- (平均合併 5天 9小時) (30 天內合併 306 個 PR)
描述
There is a problem with dependabot-initiated PR builds. The build attempt to run jobs requiring secrets and fails as the secrets are not found Example: https://github.com/trinodb/trino/actions/runs/21819342270/job/62948556703?pr=28175 (#28175)
My understanding is that dependabot-originated flows have access to repo vars, but they don't see repo secrets except those configured for dependabot itself. Given job conditions being has-var || has-secret, this leads to build failures.
proposed solution
Change job conditions to be "(has-var && !dependabot-originated) || has-secret"