Avoiding `pull_request_target` usage in workflows
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 55/100
Research direction
Start with .github/workflows/pr-comment.yml at line 4 and read GitHub's securely using pull_request_target guidance, along with the linked checkout change. Separate the building and posting responsibilities as proposed, then verify that no workflow uses pull_request_target and that both required actions still work safely.
Written by the indexing model from the issue text.
Description
One of this repositories workflow's uses pull_request_target:
Please see the GitHub documentation for a list of risks associated with the target. I see the workflow is currently quite careful, but IMO it is still better to split it into two, one for building and one for posting.
It is now disallowed by actions/checkout (see blog post). We are also considering disabling it across the organisation (new feature), but it would break this workflow.
- Dominant language
- Python
- Stars
- 371
- Forks
- 413
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from python/python-docs-es
-
3.14
Difficulty 2/5 1-2 days Newbie friendliness 72/100
python/python-docs-es#3839 · 1 comment ·
-
3.14 good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
python/python-docs-es#3838 · 2 comments ·
-
3.14 good first issue
Difficulty 1/5 Under an hour Newbie friendliness 68/100
python/python-docs-es#3837 · 1 comment ·
-
3.14
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
python/python-docs-es#3835 ·
-
3.14 good first issue
Difficulty 1/5 1-3 hours Newbie friendliness 68/100
python/python-docs-es#3834 · 1 comment ·
All issues in python/python-docs-es
Similar issues
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
canonical/paas-charm#368 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
tech debt
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
StevenBlack/hosts#3256 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
qualcomm/qai-appbuilder#275 ·