ci: Add inline guidance on pull_request_target usage

GoogleCloudPlatform · Jul 17, 2024 · a3418f5 · a3418f5
1 parent 8cb1ea3
commit a3418f5
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml
@@ -14,6 +14,7 @@
 
 name: Auto Label
 on:
+  # Do not use pull_request_target with actions/cache or actions/checkout.
   pull_request_target:
     types: [ opened, reopened, synchronize, edited ]