switch back to pull_request trigger for security, add comment

expressjs · Nov 6, 2024 · 9aecbfd · 9aecbfd
1 parent 47ad1a2
commit 9aecbfd
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/adr-labeler.yml b/.github/workflows/adr-labeler.yml
@@ -1,7 +1,8 @@
 name: ADR Labeler
 
 on:
-  pull_request_target:
+  # PRs coming from forks will not have the write permissions required to run this action
+  pull_request:
     types: [opened, synchronize]
     paths:
       - 'docs/adr/**'