This is explained here: > Here's the trick: github.actor does not always refer t...

		bavarianbob 3 months ago \| parent \| context \| favorite \| on: Weaponizing Dependabot: Pwn Request at its finest This is explained here: > Here's the trick: github.actor does not always refer to the actual creator of the Pull Request. It's the user who caused the latest event that triggered the workflow.