Hi all,
Please replace insecure usage of pull_request_target. Here is at least one instance:
We have pull_request_target guidance and suggested alternatives on the OSDO site at go/github-pull-request-target.
I have limited pull requests to internal QC members only for the time being until this is addressed. Reach out to go/ossops if you have questions or concerns.
Thanks,
Sandhya
Hi all,
Please replace insecure usage of pull_request_target. Here is at least one instance:
logging/.github/workflows/build_qnx8.yml
Line 16 in 2f5bbc6
We have pull_request_target guidance and suggested alternatives on the OSDO site at go/github-pull-request-target.
I have limited pull requests to internal QC members only for the time being until this is addressed. Reach out to go/ossops if you have questions or concerns.
Thanks,
Sandhya