From 6246a9df0e001b9f7c06757f91fb6f96ca9ea5af Mon Sep 17 00:00:00 2001 From: Sean Robinson Date: Tue, 11 Jan 2022 06:48:00 -0700 Subject: [PATCH] Change Static Analysis trigger event to pull_request_target The GH security model restricts comment posting from PR actions. StaticAnalysis has added support for pull_request_target to mitigate risks while still allowing comments by the bot. Signed-off-by: Sean Robinson --- .github/workflows/static_analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/static_analysis.yml b/.github/workflows/static_analysis.yml index 0d47ee1..d5a2e50 100644 --- a/.github/workflows/static_analysis.yml +++ b/.github/workflows/static_analysis.yml @@ -1,7 +1,7 @@ name: Static Analysis -on: pull_request +on: pull_request_target jobs: