From d01f2c7e3e04242be2623b24de3948471da6a808 Mon Sep 17 00:00:00 2001
From: nakamura <shop@goosys.sakura.ne.jp>
Date: Fri, 10 Jul 2026 16:10:32 +0900
Subject: [PATCH] Scope Bundler Audit to Dependabot Bundler PRs

---
 .github/workflows/bundle-audit.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/bundle-audit.yml b/.github/workflows/bundle-audit.yml
index fbbe21039..4837a6c93 100644
--- a/.github/workflows/bundle-audit.yml
+++ b/.github/workflows/bundle-audit.yml
@@ -1,14 +1,12 @@
 ---
 name: Bundler Audit
 on:
-  push:
-    branches:
-      - 'main'
   pull_request:
     types: [opened, synchronize, reopened]
 
 jobs:
   audit:
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && startsWith(github.head_ref, 'dependabot/bundler/')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7