(opendal) 01/03: chore(dependabot): disable checks requiring secrets

[er...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

erickguan pushed a commit to branch rule-dependabot
in repository https://gitbox.apache.org/repos/asf/opendal.git

commit 3fa24cd3c6480a0a8f9716b001131207ae7c8709
Author: Erick Guan <29...@users.noreply.github.com>
AuthorDate: Mon Jul 14 11:03:56 2025 +0200

    chore(dependabot): disable checks requiring secrets
---
 .github/workflows/test_behavior.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test_behavior.yml b/.github/workflows/test_behavior.yml
index 85c2fc76a..59fe33e13 100644
--- a/.github/workflows/test_behavior.yml
+++ b/.github/workflows/test_behavior.yml
@@ -58,7 +58,8 @@ jobs:
             fi
           elif [ "$event_name" == "pull_request" ]; then
             pr_head_repo_fork="${{ github.event.pull_request.head.repo.fork }}"
-            if [ "$pr_head_repo_fork" != "true" ]; then
+            # Only expose secrets for main repo and non-dependabot runs to mitigate security risks
+            if [ "$pr_head_repo_fork" != "true" ] && [ "${{ github.actor }}" != "dependabot[bot]" ]; then
               has_secrets="true"
             fi