about summary refs log tree commit diff
path: root/nixpkgs/.github/workflows/pending-set.yml
diff options
context:
space:
mode:
Diffstat (limited to 'nixpkgs/.github/workflows/pending-set.yml')
-rw-r--r--nixpkgs/.github/workflows/pending-set.yml5
1 files changed, 5 insertions, 0 deletions
diff --git a/nixpkgs/.github/workflows/pending-set.yml b/nixpkgs/.github/workflows/pending-set.yml
index 944d1deefb9f..b15e4847e67c 100644
--- a/nixpkgs/.github/workflows/pending-set.yml
+++ b/nixpkgs/.github/workflows/pending-set.yml
@@ -3,6 +3,11 @@ name: "set pending status"
 on:
   pull_request_target:
 
+# WARNING:
+# When extending this action, be aware that $GITHUB_TOKEN allows write access to
+# the GitHub repository. This means that it should not evaluate user input in a
+# way that allows code injection.
+
 jobs:
   action:
     runs-on: ubuntu-latest