From 55c85917ff4989dc76bb8c74eccffea1804487bd Mon Sep 17 00:00:00 2001 From: security-bot Date: Sun, 31 May 2026 15:11:46 -0400 Subject: [PATCH] ci: stop running untrusted PR code with secrets (pull_request_target -> pull_request) --- .github/workflows/run-tests.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index ef32dc1..be5150f 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -2,8 +2,8 @@ name: Run tests on: workflow_dispatch: - pull_request_target: - types: [assigned, opened, synchronize, reopened] + pull_request: + types: [opened, synchronize, reopened] jobs: build: @@ -15,8 +15,6 @@ jobs: node-version: [16.x] steps: - uses: actions/checkout@v2 - with: - ref: ${{ github.event.pull_request.head.sha }} - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v1 with: