Mmastodon TechnologySoftware first seen 8 h ago, last 8 h ago, peak #6
GitHub to change pull_request_target workflow behavior this year
Original: GitHub is changing how pull_request_target works this year. Two dated changes affect every public... # github # security
GitHub has announced two dated changes to how the pull_request_target trigger works, affecting every public repository that uses it in CI workflows. The change is aimed at tightening security around workflows that run with access to repository secrets while checking untrusted pull request code. Developers of popular open source projects are assessing which automations may break, with reports suggesting roughly a thousand workflows could be impacted.
Why now: Open source maintainers need to update widely used CI workflows before the changes take effect, raising concerns about breakage and security.
GitHubpull_request_targetopen source developers
Evidence
- GitHub is changing how pull_request_target works this year. Two dated changes affect every public... # github # security # devops # opensource # software # coding # development # engineering # inclusive # community What GitHub's pull_request_target changes break in the 1,000… · hackaday@www.urbanmind.net · 3
API: https://socialmediatrends-api.osmike.com/v1/trends/41318