A manually started deployment workflow accepts dry_run as a workflow_dispatch input of type boolean. A job should execute only when the operator selected true. Which expression directly uses the typed input?

1. if: ${{ secrets.dry_run }}
2. if: ${{ env.dry_run }} without assigning an environment variable
3. if: ${{ inputs.dry_run }}
4. if: ${{ github.event.inputs.dry_run }} without any comparison or conversion