Actions: skip unsupported uses strings

github_actions/lib/dependabot/github_actions/file_parser.rb

@@ -46,6 +46,7 @@ def workfile_file_dependencies(file)
 
         uses_strings.each do |string|
           # TODO: Support Docker references and path references
+          next if string.start_with?(".", "docker://")
           next unless string.match?(GITHUB_REPO_REFERENCE)
 
           dep = build_github_dependency(file, string)

github_actions/spec/dependabot/github_actions/file_parser_spec.rb

@@ -215,6 +215,14 @@ def mock_service_pack_request(nwo)
       end
     end
 
+    describe "with a local reusable workflow that has an @ in the file name" do
+      let(:workflow_file_fixture_name) { "local_workflow_with_at.yml" }
+
+      it "does not treat the path like a dependency" do
+        expect(dependencies).to eq([])
+      end
+    end
+
     describe "with composite actions" do
       let(:workflow_file_fixture_name) { "composite_action.yml" }
       let(:workflow_files) do

github_actions/spec/fixtures/workflow_files/local_workflow_with_at.yml

@@ -0,0 +1,6 @@
+on:
+  pull_request:
+
+jobs:
+  test:
+    uses: ./.github/workflows/test.yml@v2.1.0