From 1738779c5b673dd3eb504888773e2febc5987959 Mon Sep 17 00:00:00 2001
From: Jonathan Hedley <jonathan@hedley.net>
Date: Wed, 31 Jul 2024 12:10:11 +1000
Subject: [PATCH] Worklow: in codeql, don't trigger on non-main branch push

Otherwise dependabot will get a permission error for the upload artifact step when pushing to its branch. Still gets executed OK in the pull_request event. May need to re-set for build flow too.
---
 .github/workflows/codeql.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 24b5e98dac..9ad4905964 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -2,6 +2,8 @@ name: CodeQL
 
 on:
   push:
+    branches:
+      - master
   pull_request:
 
 jobs: