Update Github Actions to secure pull request workflows from forks

Open dkozma opened this issue 3 years ago • 2 comments

Right now, secrets are not shared for forks on GitHub Actions, which is breaking pull request validations on forked repos. For now, we will be making branches on the local repo, however we should be using the pull_request_target workflow and conditionally running actions as discussed here: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

May 16 '22 19:05 dkozma

@adobe export issue to Jira project CAI

Jan 23 '23 19:01 crandmck

:white_check_mark: Jira issue https://jira.corp.adobe.com/browse/CAI-3376 is successfully created for this GitHub issue.

Jan 23 '23 19:01 github-jira-sync-bot