From bcd226d56c5d47874e69f244990cf12d58a6781a Mon Sep 17 00:00:00 2001 From: Josiel Souza Date: Mon, 23 Mar 2026 11:05:27 +0000 Subject: [PATCH] DTOSS-12521: skip deploy stage on PRs without deploy label Dependabot PRs do not have access to repository secrets by design, causing the deploy stage to fail on Azure login. Gate deploy-stage behind the deploy label, consistent with deploy-app-stage and the approach used in dtos-manage-breast-screening. --- .github/workflows/cicd-1-pull-request.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/cicd-1-pull-request.yaml b/.github/workflows/cicd-1-pull-request.yaml index 8115781f..1fc66d73 100644 --- a/.github/workflows/cicd-1-pull-request.yaml +++ b/.github/workflows/cicd-1-pull-request.yaml @@ -27,6 +27,7 @@ jobs: deploy-stage: name: Deploy stage needs: [commit-stage, test-stage] + if: contains(github.event.pull_request.labels.*.name, 'deploy') permissions: id-token: write uses: ./.github/workflows/stage-4-deploy.yaml