Skip to content

Commit

Permalink
ci(security): check for pull_request_target events in the access check (
Browse files Browse the repository at this point in the history
  • Loading branch information
zimeg authored Jan 17, 2024
1 parent 84a8f7d commit a678e58
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check user permissions
if: ${{ github.event_name == 'pull_request' && github.event.pull_request.author_association != 'MEMBER' }}
if: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.author_association != 'MEMBER' }}
run: |
echo "Action was not triggered by an organization member. Exiting now."
exit 1
Expand Down

0 comments on commit a678e58

Please sign in to comment.