mirror of
https://github.com/mRemoteNG/mRemoteNG.git
synced 2026-02-17 14:07:46 +08:00
Remove insecure pull_request_target trigger from workflow
Co-authored-by: Kvarkas <3611964+Kvarkas@users.noreply.github.com>
This commit is contained in:
8
.github/workflows/add_PR_2_chlog.yml
vendored
8
.github/workflows/add_PR_2_chlog.yml
vendored
@@ -6,11 +6,7 @@ on:
|
||||
branches:
|
||||
- v1.78.2-dev
|
||||
|
||||
# 2) Auto when a PR is closed (so you can merge manually via the UI)
|
||||
pull_request_target:
|
||||
types: [closed]
|
||||
|
||||
# 3) Manual trigger
|
||||
# 2) Manual trigger
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
dryRun:
|
||||
@@ -24,11 +20,9 @@ jobs:
|
||||
|
||||
# Only proceed if…
|
||||
# - manual dispatch
|
||||
# - OR a closed PR that was merged by you
|
||||
# - OR a push to default branch
|
||||
if: |
|
||||
github.event_name == 'workflow_dispatch' ||
|
||||
(github.event_name == 'pull_request_target' && github.event.pull_request.merged == true && github.actor == 'Dimitrij') ||
|
||||
github.event_name == 'push'
|
||||
|
||||
steps:
|
||||
|
||||
Reference in New Issue
Block a user