Skip SonarQube scan for Dependabot PRs (#1023)

Dependabot PRs don't have access to repository secrets, so SONAR_TOKEN
is always empty and the scan fails. Skip it for dependabot[bot] actor.

Co-authored-by: Ariel Rolfo <arielr-lt+username@users.noreply.github.com>

Author: arielr-lt

.github/workflows/test.yaml

@@ -73,7 +73,7 @@ jobs:
 
       - name: SonarQube scan
         uses: sonarsource/sonarqube-scan-action@v6.0.0
-        if: always()
+        if: always() && github.actor != 'dependabot[bot]'
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}