Allow Dependabot to log in

[zachgersh]

Hello friends,

Wanted to say that this has particular choice here has been causing us some problems when we ask dependabot to bump go dependencies:

buf-action/src/main.ts

Line 66 in c132b6c

if (inputs.github_actor == "dependabot[bot]") {

We'd love it if dependanbot could at least log in during a test run, we have to fetch dependencies from the buf registry.

I've worked around this by essentially doing what login would do BUT only if its dependabot, so now I have to have this in my github action yaml:

 - name: Buf Registry Login
        if: github.actor == 'dependabot[bot]'
        run: |
          buf registry login some.buf.dev --token-stdin <<< "${{ secrets.BUF_TOKEN }}"

[emcfarlane]

Hello, this is something we can look into. My previous understanding was that secrets were not accessible from dependabot but this seems to have changed.