Skip to content

Commit a678e58

Browse files
authored
ci(security): check for pull_request_target events in the access check (#282)
1 parent 84a8f7d commit a678e58

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/main.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Check user permissions
23-
if: ${{ github.event_name == 'pull_request' && github.event.pull_request.author_association != 'MEMBER' }}
23+
if: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.author_association != 'MEMBER' }}
2424
run: |
2525
echo "Action was not triggered by an organization member. Exiting now."
2626
exit 1

0 commit comments

Comments
 (0)