diff --git a/.github/workflows/comment-pr.yml b/.github/workflows/comment-pr.yml index 23ac8e2d76..f30bbd9fe9 100644 --- a/.github/workflows/comment-pr.yml +++ b/.github/workflows/comment-pr.yml @@ -1,12 +1,10 @@ name: comment-pr - # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow on: workflow_run: workflows: ["receive-pr"] types: - completed - # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ # Since this pull request has write permissions on the target repo, we should **NOT** execute any untrusted code. jobs: diff --git a/.github/workflows/receive-pr.yml b/.github/workflows/receive-pr.yml index fefc7b9c2f..a93c527d26 100644 --- a/.github/workflows/receive-pr.yml +++ b/.github/workflows/receive-pr.yml @@ -1,13 +1,11 @@ name: receive-pr - on: pull_request: types: [opened, synchronize] branches: - main - # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ # Since this pull request receives untrusted code, we should **NOT** have any secrets in the environment. jobs: upload-patch: - uses: openrewrite/gh-automation/.github/workflows/receive-pr.yml@main \ No newline at end of file + uses: openrewrite/gh-automation/.github/workflows/receive-pr.yml@main