From 981cfae3a6a756d7363665966006e4187191b6f8 Mon Sep 17 00:00:00 2001 From: Edwin Jose Date: Fri, 26 Dec 2025 11:00:54 -0600 Subject: [PATCH] Update .github/workflows/conventional-labels.yml Co-authored-by: Madhavan --- .github/workflows/conventional-labels.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/conventional-labels.yml b/.github/workflows/conventional-labels.yml index 10f761e6..92c1bf36 100644 --- a/.github/workflows/conventional-labels.yml +++ b/.github/workflows/conventional-labels.yml @@ -1,4 +1,5 @@ -# Warning, do not check out untrusted code with +# NOTE: pull_request_target is required to have write permissions to add labels on PRs from forks. +# This workflow must not be modified to check out or execute untrusted PR code, as it runs with base repo permissions. # the pull_request_target event. name: Label PRs with Conventional Commits on: