ci(security): check for pull_request_target events in the access check (#282)

2024-01-17 12:31:27 -08:00
parent 84a8f7dc29
commit a678e5895f
1 changed files with 1 additions and 1 deletions
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
    - name: Check user permissions
-      if: ${{ github.event_name == 'pull_request' && github.event.pull_request.author_association != 'MEMBER' }}
+      if: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.author_association != 'MEMBER' }}
      run: |
        echo "Action was not triggered by an organization member. Exiting now."
        exit 1