diff --git a/.github/workflows/buf-ci.yaml b/.github/workflows/buf-ci.yaml
index 124d22caf0..bd8a9f68a5 100644
--- a/.github/workflows/buf-ci.yaml
+++ b/.github/workflows/buf-ci.yaml
@@ -18,3 +18,6 @@ jobs:
       - uses: bufbuild/buf-action@v1
         with:
           token: ${{ secrets.BUF_TOKEN }}
+          # Dependabot runs do not have access to a BUF_TOKEN.
+          push: ${{ github.event_name == 'push' && github.actor != 'dependabot[bot]' }}
+          archive: ${{ github.event_name == 'delete' && github.actor != 'dependabot[bot]' }}