Skip to content

fix(workflow): remove pull_request_target from conventional-commits.yml#722

Merged
derekbit merged 1 commit into
longhorn:masterfrom
derekbit:issue-12754
Mar 6, 2026
Merged

fix(workflow): remove pull_request_target from conventional-commits.yml#722
derekbit merged 1 commit into
longhorn:masterfrom
derekbit:issue-12754

Conversation

@derekbit

@derekbit derekbit commented Mar 6, 2026

Copy link
Copy Markdown
Member

Which issue(s) this PR fixes:

Issue longhorn/longhorn#12754

What this PR does / why we need it:

Special notes for your reviewer:

Additional documentation or context

Longhorn 12754

Signed-off-by: Derek Su <derek.su@suse.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Conventional Commits GitHub Actions workflow to avoid using the pull_request_target trigger (per longhorn/longhorn#12754), reducing the workflow’s exposure to elevated permissions when running on PRs.

Changes:

  • Switch workflow trigger from pull_request_target to pull_request.
  • Add explicit contents: read permission.
  • Checkout PR HEAD commit explicitly before running commit/PR lint checks.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

@derekbit derekbit merged commit aa00045 into longhorn:master Mar 6, 2026
13 of 14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants