ci: use pull_request_target for vercel-pull-request

Use `types: [labeled]` to mitigate the risk of running untrusted code.
getcronit · Oct 10, 2024 · 2db84fe · 2db84fe · github-actions · Oct 10, 2024
1 parent 08163e5
commit 2db84fe
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 17 deletions.
diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
diff --git a/.github/workflows/vercel-pull-request.yml b/.github/workflows/vercel-pull-request.yml
@@ -1,11 +1,10 @@
 # vercel-pull-request.yml
 name: Create vercel preview URL on pull request
 on:
- workflow_run:
- workflows:
- - acceptance
- types:
- - completed
+ pull_request_target:
+ types: [labeled]
+ branches:
+ - main
 jobs:
  build_and_deploy:
  runs-on: ubuntu-latest