[sec-check] pr-triage.yml: pull_request_target with contents: write is overly broad — fork PRs get unnecessary write access #1267
actionadon.yml
on: issues
ensure-labels
9s
on-issue-opened
6s
on-labeled
0s
claim-handler
0s
stale-claim-sweep
0s