File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -19,7 +19,7 @@ Create a workflow file that contains a step that uses: `dependabot/fetch-metadat
1919``` yaml
2020-- .github/workflows/dependabot-prs.yml
2121name : Dependabot Pull Request
22- on : pull_request_target
22+ on : pull_request
2323if : github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo'
2424jobs :
2525 build :
@@ -103,7 +103,7 @@ have a permissive auto-approval on all Dependabot PRs like so:
103103
104104` ` ` yaml
105105name: Dependabot auto-approve
106- on: pull_request_target
106+ on: pull_request
107107permissions:
108108 pull-requests: write
109109jobs:
@@ -137,7 +137,7 @@ For example, if you want to automatically merge all patch updates to Rails:
137137
138138` ` ` yaml
139139name : Dependabot auto-merge
140- on : pull_request_target
140+ on : pull_request
141141permissions :
142142 pull-requests : write
143143 contents : write
@@ -165,7 +165,7 @@ For example, if you want to flag all production dependency updates with a label:
165165
166166` ` ` yaml
167167name : Dependabot auto-label
168- on : pull_request_target
168+ on : pull_request
169169permissions :
170170 pull-requests : write
171171 issues : write
You can’t perform that action at this time.
0 commit comments