gui.do / barazo-api
Barazo AppView backend barazo.forum
Star
Fork 0
Watch

fix(ci): use pull_request_target for Dependabot secret access (#137) master

Dependabot PRs don't receive repo secrets under pull_request events, causing DEPLOY_PAT to be empty. Switch to pull_request_target which runs in the base branch context with full secret access. Safe because the workflow only runs for dependabot[bot] and only executes pnpm install -- no PR-supplied code is run.

Author Guido X Jansen Committer GitHub Date Commit bf6ea21b Parent 5d386d3d
+7 -2
1 changed file