Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: kirkrodrigues <[email protected]>
  • Loading branch information
LinZhihao-723 and kirkrodrigues authored Dec 1, 2024
1 parent 6a16efc commit 6422802
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions .github/workflows/pr-title-checks.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,14 @@ name: "pr-title-checks"

on:
pull_request_target:
# NOTE: The `pull_request_target` event means GITHUB_TOKEN can access secrets and is granted
# read/write repository access by default. So we need to ensure:
# NOTE: Workflows triggered by this event give the workflow access to secrets and grant the
# `GITHUB_TOKEN` read/write repository access by default. So we need to ensure:
# - This workflow doesn't inadvertently check out, build, or execute untrusted code from the
# pull request triggered by this event.
# - Each job has `permissions` set to only those necessary.
types: ["edited", "opened", "reopened"]
branches: ["main"]
permissions: {}

concurrency:
group: "${{github.workflow}}-${{github.ref}}"
Expand Down

0 comments on commit 6422802

Please sign in to comment.