Use pull_request_target for write permissions

code-hike · Dec 23, 2024 · ca98396 · ca98396
1 parent 3733049
commit ca98396
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/pr-merged.yml b/.github/workflows/pr-merged.yml
@@ -1,7 +1,7 @@
 name: PR Merged
 
 on:
-  pull_request:
+  pull_request_target:
     types: [closed]
     branches:
       - next
@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
 
       - name: Install pnpm
         uses: pnpm/action-setup@v4

diff --git a/.github/workflows/pr-updated.yml b/.github/workflows/pr-updated.yml
@@ -1,7 +1,7 @@
 name: PR Updated
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - next
 
@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
 
       - name: Install pnpm
         uses: pnpm/action-setup@v4