Mitigate pull_request_target privilege escalation

Hotfix — replaces pull_request_target with pull_request to stop granting write permissions and secrets to fork PRs. Some workflows will break; can be fixed properly later.
2026-02-19 23:53:48 -05:00
parent 9389666095
commit bcd2d11143
1 changed files with 1 additions and 1 deletions
@@ -5,7 +5,7 @@ concurrency:
  cancel-in-progress: true
 on:
-  pull_request_target:
+  pull_request:
    branches:
      - master
      - release*