chore: harden language in ci (#36314)

This commit is contained in:
Mason Daugherty
2026-03-27 15:24:11 -04:00
committed by GitHub
parent 954a23094d
commit 0351588117
2 changed files with 4 additions and 1 deletions

View File

@@ -27,7 +27,8 @@ name: "🏷️ PR Labeler"
on:
# Safe since we're not checking out or running the PR's code.
# Never check out the PR's head in a pull_request_target job.
# NEVER CHECK OUT UNTRUSTED CODE FROM A PR's HEAD IN A pull_request_target JOB.
# Doing so would allow attackers to execute arbitrary code in the context of your repository.
pull_request_target:
types: [opened, synchronize, reopened, edited]

View File

@@ -13,6 +13,8 @@ name: Require Issue Link
on:
pull_request_target:
# NEVER CHECK OUT UNTRUSTED CODE FROM A PR's HEAD IN A pull_request_target JOB.
# Doing so would allow attackers to execute arbitrary code in the context of your repository.
types: [edited, reopened, labeled, unlabeled]
# ──────────────────────────────────────────────────────────────────────────────