Skip to content

Commit 146bb00

Browse files
authored
chore: Replace pull_request_target with pull_request in PR title validation (#377)
Replace `pull_request_target` with `pull_request` to reduce attack surface. The semantic PR title action only reads the event payload, so elevated permissions are not needed.
1 parent 244efd2 commit 146bb00

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/pr_title.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: "Validate PR title"
22

33
on:
4-
pull_request_target:
4+
pull_request:
55
types:
66
- opened
77
- edited

0 commit comments

Comments
 (0)