diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 318f168b..70d22720 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -3,6 +3,7 @@ on: push
 jobs:
   build:
     runs-on: ubuntu-18.04
+    if: ${{ github.actor != 'dependabot[bot]' }}
 
     steps:
     - name: Checkout
diff --git a/scripts/build-macos.js b/scripts/build-macos.js
index 7effd521..1fda44ed 100755
--- a/scripts/build-macos.js
+++ b/scripts/build-macos.js
@@ -6,6 +6,12 @@ const isTag = (process.env.GITHUB_REF || '').startsWith('refs/tags/')
 
 process.env.ARCH = process.env.ARCH || process.arch
 
+if (process.env.GITHUB_HEAD_REF) {
+    delete process.env.CSC_LINK
+    delete process.env.CSC_KEY_PASSWORD
+    process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false'
+}
+
 builder({
     dir: true,
     mac: ['pkg', 'zip'],