Skip to content

Commit 3e3d62d

Browse files
committed
first-interaction: Fix repository issues
Per [1], we need to use pull_request_target instead of pull_request here. The tl;dr is that this runs as the *users* credentials, but they may not have access to the repo. See also [2]. [1] https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ [2] actions/first-interaction#31 Signed-off-by: Kyle Mestery <[email protected]>
1 parent e7531ab commit 3e3d62d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/first-interaction.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ name: 'First Interaction'
33
on:
44
issues:
55
types: [ opened ]
6-
pull_request:
6+
pull_request_target:
77
branches: [ main ]
88

99
workflow_dispatch:

0 commit comments

Comments
 (0)