Update CI to use `pull_request_target`

foundry-rs / starknet-foundry

Blazing fast toolkit for developing Starknet contracts.

https://foundry-rs.github.io/starknet-foundry/

MIT License

280 stars 139 forks source link

Update CI to use `pull_request_target` #2141

Closed tomek0123456789 closed 2 weeks ago

tomek0123456789 commented 1 month ago

Which component is your feature related to?

Forge, Cast

Feature Request

Right now, when an external contributor wants to open a PR from a fork and we approve the CI run, the secrets we're using in tests aren't available to that run (GitHub security reasons).

Update CI to fix secret fetching
- Look into Preventing pwn requests blogpost
Additionally, update documentation with information that external contributors need to set secrets in their fork repository

tomek0123456789 commented 2 weeks ago

Closing since we are reverting the changes.