Skip to content

Commit

Permalink
build(github): use pull_request_target
Browse files Browse the repository at this point in the history
Using `pull_request` event won't work with forks due to security concerns. `pull_request_target` is what we should be using.

Signed-off-by: Ahmed T. Ali <[email protected]>
  • Loading branch information
z0al authored and petermetz committed Dec 11, 2020
1 parent 240f999 commit 40958be
Showing 1 changed file with 11 additions and 2 deletions.
13 changes: 11 additions & 2 deletions .github/workflows/dependent-issues.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,16 @@ name: Dependent Issues

on:
issues:
pull_request:
types:
- opened
- edited
- reopened
pull_request_target:
types:
- opened
- edited
- reopened
- synchronize
schedule:
- cron: '0 0 * * *' # schedule daily check

Expand All @@ -24,4 +33,4 @@ jobs:

# (Optional) A comma-separated list of keywords. Default
# "depends on, blocked by"
keywords: depends on, blocked by
keywords: depends on, blocked by

0 comments on commit 40958be

Please sign in to comment.