Skip to content

Commit 454725d

Browse files
Update content/actions/reference/security/secure-use.md
1 parent 3b24c7d commit 454725d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

content/actions/reference/security/secure-use.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,7 @@ There are a number of different approaches available to help you mitigate the ri
121121

122122
### Avoid potentially dangerous workflow triggers
123123

124-
Avoid using the `pull_request_target` workflow trigger if not necessary. Prefer using `workflow_run` for privilege separation between workflows as described in [Keeping your GitHub Actions and workflows secure: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests). Only use these workflow triggers when the workflow actually needs the privileged context.
124+
Avoid using the `pull_request_target` workflow trigger if not necessary. Prefer using `workflow_run` for privilege separation between workflows as described in [Keeping your {% data variables.product.prodname_actions %} and workflows secure: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests). Only use these workflow triggers when the workflow actually needs the privileged context.
125125

126126
### Do not use the `pull_request_target` and `workflow_run` workflow triggers with untrusted content
127127

0 commit comments

Comments
 (0)