Open JobaDiniz opened 1 year ago
Which event triggers the workflow? pull_request
or pull_request_target
?
pull_request
pull_request_target
is a little safer and GH will allow forks and bots to do more stuff.
If you need to use pull_request
, you could add the correct permissions to the job
. I think this should work:
permissions:
contents: read
pull_requests: write
I've encountered the same error using pull_request_target.
I get this error in pull-requests made by @dependabot