Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: add support for lint-pr GitHub action workflow 🕺 #1356

Merged
merged 1 commit into from Apr 23, 2022
Merged

build: add support for lint-pr GitHub action workflow 🕺 #1356

merged 1 commit into from Apr 23, 2022

Conversation

vinayakkulkarni
Copy link
Contributor

@ronag ronag requested a review from mcollina April 22, 2022 07:48
name: 'Lint PR'

on:
pull_request_target:
Copy link
Contributor

@Fdawgs Fdawgs Apr 22, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using pull_request_target is risky and has a lot of security implications, see the following:

Permissions would need to be added to the workflow to restrict what it can do, i.e.:

permissions:
    pull-requests: write

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I missed this, sorry! Could you swnd a PR?

Copy link
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@mcollina mcollina merged commit a8c2918 into nodejs:main Apr 23, 2022
@vinayakkulkarni vinayakkulkarni deleted the build/add-semantic-pull-request-workflow branch April 25, 2022 08:46
KhafraDev pushed a commit to KhafraDev/undici that referenced this pull request Jun 23, 2022
metcoder95 pushed a commit to metcoder95/undici that referenced this pull request Dec 26, 2022
crysmags pushed a commit to crysmags/undici that referenced this pull request Feb 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants