ci: support no secrets for dependabot (elastic#3473)

.ci/scripts/jboss-pull.sh

@@ -3,14 +3,32 @@
 # Bash strict mode
 set -eo pipefail
 
+# Retry the given command for the given times.
+retry() {
+  local retries=$1
+  shift
+  local count=0
+  until "$@"; do
+    exit=$?
+    wait=$((2 ** count))
+    count=$((count + 1))
+    if [ $count -lt "$retries" ]; then
+      sleep $wait
+    else
+      return $exit
+    fi
+  done
+  return 0
+}
+
 ## This script is used by the CI to be able to re-tag the docker images
 ## to use the official docker namespace.
 ## Or by an Elastic employee to configure the docker images as needed.
 while read -r i ; do
   [[ -z $i ]] && continue
   name="${i##*/}"
   echo "::group::$name"
-  docker pull docker.elastic.co/observability-ci/$name --platform linux/amd64
+  retry 3 docker pull --platform linux/amd64 docker.elastic.co/observability-ci/$name
   docker tag docker.elastic.co/observability-ci/$name $i
   echo "::endgroup::"
 done < .ci/scripts/jboss-docker-images.txt

.github/workflows/main.yml

@@ -325,7 +325,8 @@ jobs:
     name: JBoss integration tests
     runs-on: ubuntu-latest
     needs: build
-    if: github.event_name != 'pull_request' || github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false
+    # If no PR event or if a PR event that's caused by a non-fork and non dependabot actor
+    if: github.event_name != 'pull_request' || ( github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false && github.actor != 'dependabot[bot]' )
     steps:
       - uses: actions/checkout@v4
       - uses: elastic/apm-pipeline-library/.github/actions/docker-login@current