Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/welcome-first-time-contrib.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@
name: Welcome first time contributors

on:
pull_request:
types:
- opened
pull_request_target: # Needed to write welcome comments on fork PRs; script only uses the GitHub API.
types:
- opened # zizmor: ignore[dangerous-triggers]
issues:
types:
- opened
Expand All @@ -18,7 +18,7 @@
jobs:
welcome:
name: Post welcome message
if: ${{ !contains(fromJson('["asyncapi-bot", "dependabot[bot]", "dependabot-preview[bot]", "allcontributors[bot]"]'), github.actor) }} # zizmor: ignore[obfuscation]

Check failure on line 21 in .github/workflows/welcome-first-time-contrib.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Workflows should not rely on forgeable GitHub context values to trust events

See more on https://sonarcloud.io/project/issues?id=asyncapi_diff&issues=AZ7f63tDU-NKBj7Xv9HA&open=AZ7f63tDU-NKBj7Xv9HA&pullRequest=227
runs-on: ubuntu-latest
permissions:
contents: read # Required to read repository data for checking if it's the user's first contribution
Expand Down
Loading