diff options
author | Jörg Thalheim <joerg@thalheim.io> | 2022-03-19 19:43:22 +0100 |
---|---|---|
committer | Jörg Thalheim <joerg@thalheim.io> | 2022-03-21 08:54:42 +0100 |
commit | 92a720cbacbdbbdf4be68eb1d0c2f2b83b226406 (patch) | |
tree | 16cff7ea0224b9d1701d9aa3bf869e09a328af09 /.github/workflows/backport.yml | |
parent | 819debc3575a3fae447202ecabc466eeaa826feb (diff) | |
download | nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar.gz nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar.bz2 nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar.lz nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar.xz nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.tar.zst nixlib-92a720cbacbdbbdf4be68eb1d0c2f2b83b226406.zip |
ci: add warning to actions with writeable GITHUB_TOKEN
Co-authored-by: ckie <25263210+ckiee@users.noreply.github.com>
Diffstat (limited to '.github/workflows/backport.yml')
-rw-r--r-- | .github/workflows/backport.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index bcb164a04eef..4ee5adfaac1e 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -2,6 +2,12 @@ name: Backport on: pull_request_target: types: [closed, labeled] + +# WARNING: +# When extending this action, be aware that $GITHUB_TOKEN allows write access to +# the GitHub repository. This means that it should not evaluate user input in a +# way that allows code injection. + jobs: backport: name: Backport Pull Request |