singularity/singularity-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: use pull_request_target so AI triage has secret access on PRs

Browse source 
pull_request events from forks/branches cannot access repo secrets,
causing 401 auth failures on every PR triage. pull_request_target runs
in the base repo context. Safe because the workflow only reads event
payload data and sparse-checks base branch docs — no PR code executes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Lex Christopherson 2026-03-19 21:23:15 -06:00
parent 71c3b12e70
commit 2a87687483
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/ai-triage.yml vendored
View file

@ -3,7 +3,7 @@ name: AI Triage
on:
issues:
types: [opened]
pull_request:
pull_request_target:
types: [opened]
permissions: