search

nginxinc / kubernetes-ingress

NGINX and NGINX Plus Ingress Controllers for Kubernetes
https://docs.nginx.com/nginx-ingress-controller
Apache License 2.0
4.55k stars 1.95k forks source link

Investigate pull-request-target for forked workflows #5500

Open vepatel opened 4 weeks ago

vepatel commented 4 weeks ago

https://nathandavison.com/blog/github-actions-and-the-threat-of-malicious-pull-requests https://gist.github.com/ndavison/d14dbbd9d015eeeef19b923ab80b1f1a

github-actions[bot] commented 4 weeks ago

Hi @vepatel thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this :slightly_smiling_face:

Cheers!