Skip to content

Commit 1ff39f1

Browse files
committed
Replace pull_request with pull_request_target
1 parent eb89e01 commit 1ff39f1

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

.github/workflows/e2e_tests.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ name: Playwright Tests
33
on:
44
push:
55
branches: [main]
6-
pull_request:
6+
pull_request_target:
77
branches: [main]
88

99
permissions:
@@ -20,7 +20,10 @@ jobs:
2020
sudo apt-get update
2121
sudo apt-get install -y libwoff1
2222
23+
# Security: Explicitly checkout the PR's code, not the target branch
2324
- uses: actions/checkout@v4
25+
with:
26+
ref: ${{ github.event.pull_request.head.sha }}
2427

2528
- uses: actions/setup-node@v4
2629
with:

0 commit comments

Comments
 (0)