From 822c67ca55e73a598cd7874693839613eb656edd Mon Sep 17 00:00:00 2001 From: ayobamiseun Date: Wed, 8 Jul 2026 23:39:53 +0100 Subject: [PATCH] ci: scope dependency-review to upstream PRs - forks lack Dependency graph by default Verified on a fork: the action fails with 'Dependency review is not supported on this repository' until Dependency graph is manually enabled, and forks don't inherit it. Guarded with the same github.repository == upstream condition the other upstream-only jobs use. With the graph enabled the action passes, so the config itself is sound. --- .github/workflows/ci.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fc2381c..610716b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -55,8 +55,11 @@ jobs: - run: python tools/security_guards.py dependency-review: - name: Dependency review - if: github.event_name == 'pull_request' + name: Dependency review (upstream PRs only) + # Requires the repo's Dependency graph (enabled by default on public + # repos, but NOT on forks) - so this runs only on PRs to the upstream + # repo, same pattern as the other upstream-only jobs. + if: github.event_name == 'pull_request' && github.repository == 'MadsLorentzen/ai-job-search' runs-on: ubuntu-latest steps: - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4