Skip to content

AST-145894 - fix dependabot auto-merge workflow#46

Merged
cx-adar-zandberg merged 1 commit intomainfrom
chore/fix-dependabot-auto-merge
Apr 12, 2026
Merged

AST-145894 - fix dependabot auto-merge workflow#46
cx-adar-zandberg merged 1 commit intomainfrom
chore/fix-dependabot-auto-merge

Conversation

@cx-adar-zandberg
Copy link
Copy Markdown
Contributor

Summary

  • Replaces the reusable workflow call with a standalone, self-contained dependabot auto-merge workflow
  • Waits for required CI checks (unit-tests, validate_jira_key) before approving and squash-merging
  • Uses pinned dependabot/fetch-metadata action (v2.3.0) for supply-chain security

Test plan

  • Verify the workflow triggers on dependabot PRs (pull_request_target events)
  • Confirm required checks are polled correctly before auto-merge proceeds
  • Confirm non-dependabot PRs are skipped (the if: guard)

@cx-shaked-karta
Copy link
Copy Markdown
Contributor

Logo
Checkmarx One – Scan Summary & Detailsb7245ce8-66e7-46db-816c-de27ae9f71a0

Great job! No new security vulnerabilities introduced in this pull request


Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@cx-adar-zandberg cx-adar-zandberg changed the title chore: fix dependabot auto-merge workflow AST-145894 - fix dependabot auto-merge workflow Apr 12, 2026
@cx-adar-zandberg cx-adar-zandberg merged commit 93789d8 into main Apr 12, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants