From 13eaba98d505fb783af90d36e8e6c8b7bc8538e6 Mon Sep 17 00:00:00 2001 From: Kevin Minehart <5140827+kminehart@users.noreply.github.com> Date: Fri, 25 Apr 2025 12:52:52 -0500 Subject: [PATCH] CI: Use pull_request_target for PR patch check (#104567) Use pull_request_target for PR patch check --- .github/workflows/pr-patch-check-event.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/pr-patch-check-event.yml b/.github/workflows/pr-patch-check-event.yml index 03dd31a7539..e93d870adf8 100644 --- a/.github/workflows/pr-patch-check-event.yml +++ b/.github/workflows/pr-patch-check-event.yml @@ -3,7 +3,7 @@ name: Dispatch check for patch conflicts run-name: dispatch-check-patch-conflicts-${{ github.base_ref }}-${{ github.head_ref }} on: - pull_request: + pull_request_target: types: - opened - reopened @@ -26,7 +26,6 @@ jobs: # App needs Actions: Read/Write for the grafana/security-patch-actions repo app_id: ${{ secrets.GRAFANA_DELIVERY_BOT_APP_ID }} private_key: ${{ secrets.GRAFANA_DELIVERY_BOT_APP_PEM }} - - name: "Dispatch job" uses: actions/github-script@v7 with: