Author: Luffy (sy-records)
Committer: Derick Rethans (derickr)
Date: 2026-07-09T13:49:52+01:00

Commit: 
https://github.com/php/web-php/commit/fed892e3ce5fc2714a39a28c9fe2b4cb754af825
Raw diff: 
https://github.com/php/web-php/commit/fed892e3ce5fc2714a39a28c9fe2b4cb754af825.diff

Update GitHub Actions permissions for pull request handling

Changed paths:
  M  .github/workflows/preview-deploy.yml


Diff:

diff --git a/.github/workflows/preview-deploy.yml 
b/.github/workflows/preview-deploy.yml
index 7a9c6e27c9..0e241365c0 100644
--- a/.github/workflows/preview-deploy.yml
+++ b/.github/workflows/preview-deploy.yml
@@ -5,12 +5,18 @@ on:
     types:
       - completed
 
+# pull_request_target needs explicit perms; fork PRs default to read-only.
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
 jobs:
   deploy:
     runs-on: "ubuntu-22.04"
     if: >
       github.repository_owner == 'php' &&
-      github.event.workflow_run.event == 'pull_request'
+      github.event.workflow_run.event == 'pull_request_target'
 
     steps:
       - name: Download PR number

Reply via email to