Restrict build_runner_image to pull_request instead of pull_request_t…

…arget (#28745) Helps minimize risk of escalation of privileges (we may want to move to a dedicated secret for this in the future)
apache · Oct 2, 2023 · 2b20e26 · 2b20e26
1 parent 01197c4
commit 2b20e26
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/build_runner_image.yml b/.github/workflows/build_runner_image.yml
@@ -22,7 +22,7 @@ on:
   push:
     branches: ['master']
     paths: ['.github/gh-actions-self-hosted-runners/arc/images/**','.github/workflows/build_runner_image.yml']
-  pull_request_target:
+  pull_request:
     branches: ['master']
     paths: ['.github/gh-actions-self-hosted-runners/arc/images/**']
 env: