Update .github/workflows/mark-as-draft-on-requesting-changes.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Frank Elsinga 2026-01-14 14:16:16 +01:00 committed by GitHub
parent b388708474
commit 48be222eb7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,7 +1,7 @@
name: Mark PR as draft when changes are requested name: Mark PR as draft when changes are requested
# pull_request_target is safe here because: # pull_request_target is safe here because:
# 1. Only uses a pinned trusted action (by SHA) # 1. Does not use any external actions; only uses the GitHub CLI via run commands
# 2. Has minimal permissions # 2. Has minimal permissions
# 3. Doesn't checkout or execute any untrusted code from PRs # 3. Doesn't checkout or execute any untrusted code from PRs
# 4. Only adds/removes labels or changes the draft status # 4. Only adds/removes labels or changes the draft status