From 6c8c99c8a52510fca384268ccb2c855e91a4e1c5 Mon Sep 17 00:00:00 2001 From: Peter Barker Date: Sun, 17 May 2026 14:45:00 +1000 Subject: [PATCH] .github: avoid use of pull_request_target this is starting to get a very bad name in terms of security vulnerability. It is not clear why this required pull_request_target --- .github/workflows/labels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index ce822be19464e..651d8300314fb 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -1,7 +1,7 @@ name: ci on: - pull_request_target: # pull_request_target, NOT pull_request + pull_request: types: [opened, synchronize, reopened] jobs: