organization · inferred from evidence
Dependabot team
The team behind Dependabot that documented its behavior.
- Dependabot triggered GitHub Actions cannot access secrets or use a writable token
This is intended GitHub behavior, documented in the official guide "Automating Dependabot with GitHub Actions". Use the pull_request_target event instead of pull_request for workflows that need secrets or a writable token, pull_request_targ