use pull_request_target to allow access to secrets

https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
carvel-dev · Aug 16, 2022 · ea990b8 · ea990b8
1 parent b43289c
commit ea990b8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml
@@ -4,7 +4,7 @@ name: Add issues to project
 on:
   issues:
     types: ['opened']
-  pull_request:
+  pull_request_target:
     types: ['opened']
 
 jobs: