luneski/mqtt-explorer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #813 from thomasnordquist/chore/dont-use-pull-request-target-for-untrusted-code

Browse Source 
dont use pull_request_target as it opens the repo for pwnage..
This commit is contained in:
Björn Dalfors
2024-06-17 09:30:23 +00:00
committed by GitHub
parent f539e03c7e efc9fb9736
commit 8975e7b641
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/tests.yml vendored
View File

@@ -12,8 +12,6 @@ jobs:
options: --user root options: --user root
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
with:
ref: '${{ github.event.pull_request.merge_commit_sha }}' # since event is pull_request_target
- name: Install Packages - name: Install Packages
run: yarn install --frozen-lockfile run: yarn install --frozen-lockfile
- name: Build - name: Build