Skip to content

Commit 23d371d

Browse files
committed
fix(ci): update PR auto-assignment workflow to use pull_request event and improve fork handling
Related issue: pull_request_target vulnerability (https://nx.dev/blog/s1ngularity-postmortem)
1 parent 5a6b108 commit 23d371d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/pr-assigner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,4 +28,4 @@ jobs:
2828

2929
- uses: netcracker/qubership-workflow-hub/actions/pr-assigner@0f2be042d7c833c6bf60df85732609b7991fb821 #2.0.0
3030
env:
31-
GITHUB_TOKEN: ${{ secrets.GH_ACCESS_TOKEN }}
31+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)