From 4f46fbc1ec7f2dfc59961f32ab6313e11f0aa2b3 Mon Sep 17 00:00:00 2001 From: Chris B Date: Fri, 19 Jul 2024 18:35:34 -0500 Subject: [PATCH] [Action] Use pull_request_target (#6803) We should use the pull_request_target option here so that the PR runs from the pipeline in the target rather than the PR source branch. This allows the action to run with reduced security implications. --- .github/workflows/pr-description-checker.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-description-checker.yml b/.github/workflows/pr-description-checker.yml index c506eb14d2..e7cfb917fe 100644 --- a/.github/workflows/pr-description-checker.yml +++ b/.github/workflows/pr-description-checker.yml @@ -1,6 +1,6 @@ name: 'PR description checker' on: - pull_request: + pull_request_target: types: - opened - edited