From 518755a733836e3532a9446c7122bb68d2116f85 Mon Sep 17 00:00:00 2001 From: Brian Love Date: Sun, 5 Jul 2026 19:55:32 -0700 Subject: [PATCH] ci: skip Claude review on dependabot PRs (no secrets access, always red-X) Co-Authored-By: Claude Opus 4.8 --- .github/workflows/claude-review.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 8d0305a2..9f8161e3 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -14,6 +14,10 @@ permissions: jobs: review: + # Dependabot-triggered runs cannot read repo secrets, so the Claude review + # action always fails with a red X on dependabot PRs. Skip them (same + # convention as scripts/check-changesets.mjs). + if: github.actor != 'dependabot[bot]' runs-on: ubuntu-latest timeout-minutes: 25 permissions: