From ce0bbd8a507f4011b14f0dc4c10d6505c5a214ad Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Tue, 28 Oct 2025 08:15:43 +0100 Subject: [PATCH] Switch workflow trigger to pull_request event Changed the GitHub Actions workflow to use the 'pull_request' event instead of 'pull_request_target'. Updated the event check and trigger to improve security and ensure the workflow runs only for pull requests. --- .github/workflows/check_locales.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/check_locales.yml b/.github/workflows/check_locales.yml index d43e5bc45..95f6ece07 100644 --- a/.github/workflows/check_locales.yml +++ b/.github/workflows/check_locales.yml @@ -1,7 +1,7 @@ name: Check Localization Files on PR on: - pull_request_target: + pull_request: types: [opened, synchronize, reopened] paths: - "frontend/public/locales/*-*/translation.json" @@ -23,7 +23,7 @@ permissions: jobs: check-files: - if: github.event_name == 'pull_request_target' + if: github.event_name == 'pull_request' runs-on: ubuntu-latest permissions: issues: write # Allow posting comments on issues/PRs