Skip to content

fix: use pull_request instead of pull_request_target - #71

Open
crwilcox wants to merge 1 commit into
shaka-project:mainfrom
crwilcox:main
Open

crwilcox wants to merge 1 commit into
shaka-project:mainfrom
crwilcox:main

Conversation

@crwilcox

Copy link
Copy Markdown

Requested by @crwilcox (crwilcox@google.com) ahead of GitHub's November 2, 2026 default policy enforcement blocking pull_request_target workflows on public repositories without an explicit Actions event policy:

Summary

Switches validate-pr-title/validate-pr-title.yaml from on: pull_request_target to on: pull_request:

  • All configured types (opened, reopened, edited, synchronize, assigned, labeled, ready_for_review, review_requested) are supported identically on pull_request.
  • amannn/action-semantic-pull-request only reads pull request title metadata using the default GITHUB_TOKEN (no repository secrets, labels, or comments needed).
  • Once merged to main, .github/workflows/sync-common-workflows.yaml will propagate this update across the downstream shaka-project repositories using validate-pr-title.yaml.

@crwilcox crwilcox changed the title use pull_request instead of pull_request_target fix: use pull_request instead of pull_request_target Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant