use pull_request_target in reviewer lottery (#10388)

hashicorp · Oct 27, 2021 · e427812 · e427812
1 parent 2253c22
commit e427812
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/pull-request-reviewer.yml b/.github/workflows/pull-request-reviewer.yml
@@ -1,18 +1,17 @@
 name: "Pull Request Reviewer"
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, ready_for_review, reopened]
 
 permissions:
-  contents: read
   pull-requests: write
 
 jobs:
   test:
     if: ${{ github.actor != 'modular-magician' }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
-    - uses: uesteibar/reviewer-lottery@5e584a0455eb063a623b7fd949f006fc7dbcf8bf
+    - uses: actions/checkout@v2
+    - uses: uesteibar/reviewer-lottery@5531ef7fe55d814c8f8fbab12de4ff74d15b41ed
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}