Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace pull_request_target with pull_request in GitHub Actions workflows #15

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

stacklok-cloud[bot]
Copy link
Contributor

This is a Minder automated pull request.

This pull request replaces the 'pull_request_target' event with the 'pull_request' event in GitHub Actions workflows.

The 'pull_request_target' event allows GitHub Actions workflows to run
on pull requests from forks. This can be a security risk, as the event
may, if used improperly, allow untrusted code to run in the
repository.

For more information, see
https://securitylab.github.com/resources/github-actions-preventing-pwn-requests

@stacklok-cloud stacklok-cloud bot force-pushed the minder_replace_pull_request_target_with_pull_request_in_github_actions_workflows branch from 659151b to 0b4b6f8 Compare December 19, 2024 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants