Can the GitHub Actions bot be bypassed from signing commits by the GitHub Terraform provider?

Question

I have a workflow that automatically creates PRs and it needs to bypass the rules that require commits to be signed. I have looked at the Terraform docs for this and a bypass list looks like this:

 bypass_actors {
    actor_id    = 13473
    actor_type  = "Integration"
    bypass_mode = "always"   }

and is placed before the rules block.

actor_type can be:

• actor_type (String) The type of actor that can bypass a ruleset. Can be one of: RepositoryRole, Team, Integration, OrganizationAdmin

Is it possible to bypass the GitHub Actions bot?

Answer 1

You can't add GitHub actions to the bypass list at the moment. You can either use a user's PAT token or use a GitHub App and then use the app identity in the bypass list of type "integration".