service · inferred from evidence
Dependabot
A service that automatically creates pull requests for dependency updates.
- Dependabot triggered GitHub Actions cannot access secrets or use a writable token
This is intended GitHub behavior, documented in the official guide "Automating Dependabot with GitHub Actions". Use the pull_request_target event instead of pull_request for workflows that need secrets or a writable token, pull_request_targ