From 214cbbf678a7ca0fab46f384febf3a5d5410eae5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Barrag=C3=A1n=20Merino?= Date: Thu, 1 Oct 2026 08:40:43 +0000 Subject: [PATCH] :construction_worker: Drop pull_request_target from commit checker MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The job only reads commit messages, which works with the pull_request trigger for PRs from forks too. Running it on both triggers checked every PR twice, once with a privileged token it does not need. Signed-off-by: David Barragán Merino --- .github/workflows/commit-checker.yml | 7 ------- .github/zizmor.yml | 1 - 2 files changed, 8 deletions(-) diff --git a/.github/workflows/commit-checker.yml b/.github/workflows/commit-checker.yml index bd4a9f0572..29d9c79d60 100644 --- a/.github/workflows/commit-checker.yml +++ b/.github/workflows/commit-checker.yml @@ -7,13 +7,6 @@ on: - reopened - synchronize - ready_for_review - pull_request_target: - types: - - opened - - edited - - reopened - - synchronize - - ready_for_review push: branches: - main diff --git a/.github/zizmor.yml b/.github/zizmor.yml index fa7ba76bf6..6bcbaebf0a 100644 --- a/.github/zizmor.yml +++ b/.github/zizmor.yml @@ -21,7 +21,6 @@ rules: dangerous-triggers: ignore: - auto-label.yml - - commit-checker.yml # Scope GitHub App tokens. github-app: ignore: