search
pull_request_target
Trends
- 1GitHub to change pull_request_target workflow behavior this year●GitHub is changing how pull_request_target works this year. Two dated changes affect every public... # github # security
GitHub has announced two dated changes to how the pull_request_target trigger works, affecting every public repository that uses it in CI workflows. The change is aimed at tightening security around workflows that run with access to repository secrets while checking untrusted pull request code. Developers of popular open source projects are assessing which automations may break, with reports suggesting roughly a thousand workflows could be impacted.