Skip to content

Conversation

mandarini
Copy link
Contributor

What kind of change does this PR introduce?

Using pull_request_target to access secrets when PRs come from forks. This is secure, since we control which PRs trigger the preview.

What is the current behavior?

The workflow cannot run on PRs from forks because it does not have access to app-id.

What is the new behavior?

Use pull_request_target to get access to secrets.

@mandarini mandarini enabled auto-merge (squash) August 13, 2025 16:30
@coveralls
Copy link

Pull Request Test Coverage Report for Build 16943348786

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 92.391%

Totals Coverage Status
Change from base Build 16941087090: 0.0%
Covered Lines: 223
Relevant Lines: 236

💛 - Coveralls

@mandarini mandarini merged commit 0ba20be into supabase:main Aug 13, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants