Skip to content

GitHub Actions setup to automatically fix PRs of external contributors

License

Notifications You must be signed in to change notification settings

slorber/lint-autofix-ci-demo

Repository files navigation

Lint Autofix CI Demo

WIP

A demo of a GitHub Actions setup that automatically fixes PRs of external contributors.

Using pull_request_target to elevate your permissions to push to a contributor's fork is unsafe according to GitHub Security Labs best practices.

For security reasons, the process is split in 2 workflows:

  • a pull_request workflow that safely runs on the untrusted PR, and only generates a git diff patch
  • a workflow_run workflow with elevated permissions that push the diff patch to the repository

About

GitHub Actions setup to automatically fix PRs of external contributors

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published