diff --git a/.github/workflows/add-issues-and-prs-to-fs-project-board.yml b/.github/workflows/add-issues-and-prs-to-fs-project-board.yml index 52b70437..1a7b3b7a 100644 --- a/.github/workflows/add-issues-and-prs-to-fs-project-board.yml +++ b/.github/workflows/add-issues-and-prs-to-fs-project-board.yml @@ -15,7 +15,11 @@ on: issues: types: - opened - pull_request: + # Using "pull_request_target" instead of "pull_request" to support PRs from forks. + # Workflow runs triggered on PRs from forks do not have access to secrets, so "github-token" input below would otherwise be empty. + # This action does not check out nor execute user code so we should be safe. + # We also hardcode to specific hash to ensure no unintended changes underneath us. + pull_request_target: types: - opened