switch back to pull_request trigger for security, add comment

expressjs · Nov 20, 2024 · b8896c2 · b8896c2
1 parent 1d41254
commit b8896c2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/adr-labeler.yml b/.github/workflows/adr-labeler.yml
@@ -1,7 +1,8 @@
 name: ADR Labeler
 
 on:
-  pull_request_target:
+  # PRs coming from forks will not have the write permissions required to run this action
+  pull_request:
     types: [opened, synchronize]
     paths:
       - 'docs/adr/**'