From d775f7981da92827fde8af63fb25a186932a1d2f Mon Sep 17 00:00:00 2001 From: Jakob Naucke Date: Wed, 1 Jul 2026 13:11:32 +0200 Subject: [PATCH] gha: Remove `pull_request_target` flow was added in error, thinking that the `labeled` event could not apply to `pull_request` when it can. This lead to failures because checkout is not enabled by default on `pull_request_target` for security reasons, as happened in #302. Signed-off-by: Jakob Naucke --- .github/workflows/integration-tests.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml index 2900c85b..f415dabc 100644 --- a/.github/workflows/integration-tests.yml +++ b/.github/workflows/integration-tests.yml @@ -5,10 +5,8 @@ name: "Integration tests" on: pull_request: - branches: - - "main" - pull_request_target: - types: [labeled] + # Default types, plus `labeled` for when `ok-to-test` was added + types: [opened, synchronize, reopened, labeled] branches: - "main" permissions: