ci: no docker login for dependabot

.github/workflows/ci_docker.yml

@@ -58,12 +58,14 @@ jobs:
 
       - name: Login to DockerHub
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to Github Packages
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -87,7 +89,7 @@ jobs:
             ghcr.io/scito/extract_otp_secrets:latest
             ghcr.io/scito/extract_otp_secrets:bullseye
           # build on feature branches, push only on master branch
-          push: ${{ github.ref == 'refs/heads/master' }}
+          push: ${{ github.ref == 'refs/heads/master' && github.secret_source == 'Actions'}}
 
       - name: Image digest
         # TODO upload digests to assets
@@ -130,12 +132,14 @@ jobs:
 
       - name: Login to DockerHub
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to Github Packages
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -158,7 +162,7 @@ jobs:
             ghcr.io/scito/extract_otp_secrets:only-txt
             ghcr.io/scito/extract_otp_secrets:alpine
           # build on feature branches, push only on master branch
-          push: ${{ github.ref == 'refs/heads/master' }}
+          push: ${{ github.ref == 'refs/heads/master' && github.secret_source == 'Actions'}}
           build-args: |
             RUN_TESTS=true
 
@@ -209,12 +213,14 @@ jobs:
 
       - name: Login to DockerHub
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to Github Packages
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -237,7 +243,7 @@ jobs:
           pull: true
           tags: |
             scit0/extract_otp_secrets:buster
-          push: true
+          push: ${{ github.secret_source == 'Actions' }}
 
       - name: Image digest
         # TODO upload digests to assets

.github/workflows/ci_release.yml

@@ -137,12 +137,14 @@ jobs:
 
       - name: Login to DockerHub
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to Github Packages
         uses: docker/login-action@v2
+        if: github.secret_source == 'Actions'
         with:
           registry: ghcr.io
           username: ${{ github.actor }}