mirror of
https://github.com/ant-design/ant-design.git
synced 2024-11-27 20:49:53 +08:00
ci: fix CI trigger events
ref: https://nathandavison.com/blog/github-actions-and-the-threat-of-malicious-pull-requests
This commit is contained in:
parent
7f9aff2cfb
commit
3e0a722dd6
3
.github/workflows/preview.yml
vendored
3
.github/workflows/preview.yml
vendored
@ -1,7 +1,8 @@
|
||||
name: PR Preview
|
||||
|
||||
on:
|
||||
pull_request_target:
|
||||
# Why "pull_request" and not the safer "pull_request_target"? Because documentation and tests are required to be updated by PR authors, rather than pulling code from the target branch every time.
|
||||
pull_request:
|
||||
types: [opened, synchronize, reopened]
|
||||
|
||||
# Cancel prev CI if new commit come
|
||||
|
Loading…
Reference in New Issue
Block a user