I am trying to implement something like dependabot via actions.
One of the points where I am stuck is that I push from an action into an PR.
What kind of limits are there on triggering an action on an push?
Does the user need some specifig rights etc?