Skip to content

Commit

Permalink
chore: Use pull_request_target event fot scripts
Browse files Browse the repository at this point in the history
pull_request event runs with changes from PR 
and thus uses a read-only token which cannot 
comment or close PRs from forks

Using pull_request_target runs workflows 
from the target branch and thus remains 
secure and runs with write access token
  • Loading branch information
iamareebjamal authored Dec 3, 2020
1 parent 30674e3 commit a78dd3c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/scripts.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
name: "Scripts"

on:
pull_request:
pull_request_target:

jobs:
dependabot-approve:
Expand Down

0 comments on commit a78dd3c

Please sign in to comment.