Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add warning regarding pull_request_target event #1353

Closed
ylemkimon opened this issue Nov 15, 2020 · 1 comment · Fixed by #1354
Closed

Add warning regarding pull_request_target event #1353

ylemkimon opened this issue Nov 15, 2020 · 1 comment · Fixed by #1354

Comments

@ylemkimon
Copy link
Contributor

What article on docs.github.com is affected?

https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows

What part(s) of the article would you like to see updated?

pull_request_target event runs in the context of the base repository, which could be potentially dangerous if it is used to test untrusted code from public forks. It also shares the same scope of cache with the base branch.

@welcome
Copy link

welcome bot commented Nov 15, 2020

Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

@github-actions github-actions bot added the triage Do not begin working on this issue until triaged by the team label Nov 15, 2020
@janiceilene janiceilene removed the triage Do not begin working on this issue until triaged by the team label Nov 16, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants
@ylemkimon @janiceilene and others