This is an automated email from the ASF dual-hosted git repository.
vernedeng pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/inlong.git
The following commit(s) were added to refs/heads/master by this push:
new 4e42f6838f [INLONG-12081][CI] Fix github action workflow policy
violations (#12082)
4e42f6838f is described below
commit 4e42f6838f6bf5d6bebd4dffd1439781efa92339
Author: vernedeng <[email protected]>
AuthorDate: Wed Feb 25 15:47:59 2026 +0800
[INLONG-12081][CI] Fix github action workflow policy violations (#12082)
---
.github/workflows/ci_check_pr_title.yml | 7 ++-----
.github/workflows/ci_greeting.yml | 2 +-
.github/workflows/ci_labeler.yml | 5 ++++-
3 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/.github/workflows/ci_check_pr_title.yml
b/.github/workflows/ci_check_pr_title.yml
index 73f704bb55..eac1719165 100644
--- a/.github/workflows/ci_check_pr_title.yml
+++ b/.github/workflows/ci_check_pr_title.yml
@@ -18,7 +18,7 @@
name: InLong Check Pull Request Title
on:
- pull_request_target:
+ pull_request:
types:
- opened
- reopened
@@ -30,13 +30,10 @@ jobs:
name: Check pull request title
runs-on: ubuntu-22.04
steps:
- - name: Checkout
- uses: actions/checkout@v4
-
# The correct title should start with [WIP] or [INLONG-xxx],
# where xxx is the issue number, e.g. [INLONG-123].
- name: Check title
- if: ${{ github.event_name == 'pull_request_target' }}
+ if: ${{ github.event_name == 'pull_request' }}
run: |
if [[ ! "$PR_TITLE" =~ ^\[(WIP|INLONG-[0-9]+)\]\[[a-zA-Z]+\].*$ ]];
then
echo "This pull request title is not valid."
diff --git a/.github/workflows/ci_greeting.yml
b/.github/workflows/ci_greeting.yml
index 6f440f2e73..554273e652 100644
--- a/.github/workflows/ci_greeting.yml
+++ b/.github/workflows/ci_greeting.yml
@@ -18,7 +18,7 @@
name: InLong Greeting
on:
- pull_request_target:
+ pull_request:
types:
- opened
issues:
diff --git a/.github/workflows/ci_labeler.yml b/.github/workflows/ci_labeler.yml
index cf17e88f67..76075d8bb1 100644
--- a/.github/workflows/ci_labeler.yml
+++ b/.github/workflows/ci_labeler.yml
@@ -17,12 +17,15 @@
name: InLong Pull Request Labeler
-on: pull_request_target
+on: pull_request
jobs:
label:
name: Label
runs-on: ubuntu-22.04
+ permissions:
+ contents: read
+ pull-requests: write
steps:
- name: Label the PR
uses: actions/labeler@v4
