Skip to content

To retrieve the JobToken and CredToken directly from the Actions Environment instead of the Input Payload #4737

To retrieve the JobToken and CredToken directly from the Actions Environment instead of the Input Payload

To retrieve the JobToken and CredToken directly from the Actions Environment instead of the Input Payload #4737

name: Dependabot auto-merge
on: pull_request_target
permissions:
pull-requests: write
contents: write
jobs:
dependabot:
runs-on: ubuntu-latest
if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
steps:
- name: Fetch metadata
uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1.6.0
# Enable the automerge using a PAT so the merge commits trigger workflows
- name: Auto-merge
run: gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GITHUB_TOKEN: ${{ secrets.DEPENDABOT_AUTOBUILD }}