Skip to content

Commit 0643a1d

Browse files
committed
fix(ci): update PR auto-assignment workflow to use pull_request event and improve fork handling
Related issue: pull_request_target vulnerability (https://nx.dev/blog/s1ngularity-postmortem)
1 parent 23d371d commit 0643a1d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

.github/workflows/pr-assigner.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: PR Auto-Assignment
22
run-name: "Assigning reviewers for PR #${{ github.event.pull_request.number }}"
33
on:
4-
pull_request:
4+
pull_request_target:
55
types: [opened, reopened, synchronize]
66
branches:
77
- main
@@ -26,6 +26,6 @@ jobs:
2626
with:
2727
persist-credentials: false
2828

29-
- uses: netcracker/qubership-workflow-hub/actions/pr-assigner@0f2be042d7c833c6bf60df85732609b7991fb821 #2.0.0
29+
- uses: netcracker/qubership-workflow-hub/actions/pr-assigner@b575bad3a0959c4e883bc34f9d055ff07fde2dbd #2.0.1
3030
env:
3131
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)