chore: use pull_request_target event to allow forks to run jobs.

stellar · Nov 17, 2023 · 16857a6 · 16857a6
1 parent 3febca0
commit 16857a6
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 2 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -0,0 +1,3 @@
+# we set `sdp-backend` as code owners
+# require approval from 1 member of `sdp-backend` team
+@stellar/sdp-backend
diff --git a/.github/workflows/anchor_platform_integration_check.yml b/.github/workflows/anchor_platform_integration_check.yml
@@ -8,9 +8,12 @@ on:
       - "release/**"
       - "releases/**"
       - "hotfix/**"
-  pull_request:
+  pull_request_target:
   workflow_call: # allows this workflow to be called from another workflow
 
+permissions:
+  contents: read
+
 jobs:
   anchor-integration:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/e2e_integration_test.yml b/.github/workflows/e2e_integration_test.yml
@@ -8,9 +8,12 @@ on:
       - "release/**"
       - "releases/**"
       - "hotfix/**"
-  pull_request:
+  pull_request_target:
   workflow_call: # allows this workflow to be called from another workflow
 
+permissions:
+  contents: read
+
 env:
   USER_EMAIL: "[email protected]"
   USER_PASSWORD: "mockPassword123!"