update

Signed-off-by: Cédrik Fuoco <[email protected]>

Author: cedrik-fuoco-adsk

.github/workflows/pr-watcher.yml

@@ -1,6 +1,6 @@
 name: 'Create PR Checklist'
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened]
 
 permissions:
@@ -9,6 +9,10 @@ permissions:
   issues: write  # needed to add labels
   contents: read # needed to get collaborators
 
+# Security guidelines
+# Do not checkout code from the PR
+# Do not run scripts or commands from the PR
+
 jobs:
   setup:
     runs-on: ubuntu-latest