Merge pull request #1840 from microsoft/pull_req_fix

Remove pull_request_target
recommenders-team · Nov 11, 2022 · 7b986d8 · 7b986d8
2 parents 3673c01 + 4d975cc
commit 7b986d8
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 40 deletions.
diff --git a/.github/workflows/azureml-cpu-nightly.yml b/.github/workflows/azureml-cpu-nightly.yml
@@ -22,16 +22,7 @@ on:
     # to ensure we are running the build on the staging branch, we can add push policy for it
     branches: [staging]
 
-  # pull_request_target allows execution of workflows in the context
-  # of a base repository. When a PR is raised from a forked repo, it
-  # gives the workflow access to AZUREML_TEST_CREDENTIALS, stored as
-  # a repo level secret, which is needed to trigger execution of unit
-  # tests on AzureML compute.
-  pull_request_target:
-    types:
-      - opened
-      - reopened
-      - synchronize
+  pull_request:
     branches:
       - 'main'
     paths:

diff --git a/.github/workflows/azureml-gpu-nightly.yml b/.github/workflows/azureml-gpu-nightly.yml
@@ -22,16 +22,7 @@ on:
     # to ensure we are running the build on the staging branch, we can add push policy for it
     branches: [staging]
 
-  # pull_request_target allows execution of workflows in the context
-  # of a base repository. When a PR is raised from a forked repo, it
-  # gives the workflow access to AZUREML_TEST_CREDENTIALS, stored as
-  # a repo level secret, which is needed to trigger execution of unit
-  # tests on AzureML compute.
-  pull_request_target:
-    types:
-      - opened
-      - reopened
-      - synchronize
+  pull_request:
     branches:
       - 'main'
     paths:

diff --git a/.github/workflows/azureml-spark-nightly.yml b/.github/workflows/azureml-spark-nightly.yml
@@ -22,16 +22,7 @@ on:
     # to ensure we are running the build on the staging branch, we can add push policy for it
     branches: [staging]
 
-  # pull_request_target allows execution of workflows in the context
-  # of a base repository. When a PR is raised from a forked repo, it
-  # gives the workflow access to AZUREML_TEST_CREDENTIALS, stored as
-  # a repo level secret, which is needed to trigger execution of unit
-  # tests on AzureML compute.
-  pull_request_target:
-    types:
-      - opened
-      - reopened
-      - synchronize
+  pull_request:
     branches:
       - 'main'
     paths:

diff --git a/.github/workflows/azureml-unit-tests.yml b/.github/workflows/azureml-unit-tests.yml
@@ -6,16 +6,7 @@
 name: azureml-unit-tests
 
 on:
-  # pull_request_target allows execution of workflows in the context
-  # of a base repository. When a PR is raised from a forked repo, it
-  # gives the workflow access to AZUREML_TEST_CREDENTIALS, stored as
-  # a repo level secret, which is needed to trigger execution of unit
-  # tests on AzureML compute.
-  pull_request_target:
-    types:
-      - opened
-      - reopened
-      - synchronize
+  pull_request:
     branches:
       - 'staging'
       - 'main'