ci(security): check for pull_request_target events in the access check (

#282)
slackapi · Jan 17, 2024 · a678e58 · a678e58
1 parent 84a8f7d
commit a678e58
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check user permissions
-      if: ${{ github.event_name == 'pull_request' && github.event.pull_request.author_association != 'MEMBER' }}
+      if: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.author_association != 'MEMBER' }}
       run: |
         echo "Action was not triggered by an organization member. Exiting now."
         exit 1