Skip to content

Platform 1429 pr target fix - #329

Merged
m-bull merged 4 commits into
mainfrom
PLATFORM-1429-pr-target-fix
Oct 8, 2026
Merged

m-bull merged 4 commits into
mainfrom
PLATFORM-1429-pr-target-fix

Conversation

@irt-shpc

@irt-shpc irt-shpc commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

No description provided.

…PR branch

There is a security hole where a `pull_request_target` workflow running with
extra privileges checks out and runs code from the PR branch. Remove these jobs
and perform the CI checks elsewhere.

.github/workflows/helm-lint.yaml,tox.yaml: Run CI checks for every push

Rather that running as part of the `pull_request_target` workflow run the
linting and unit tests on every push.

PLATFORM-1429
…uest

Swap the `pull_request_target` trigger for `pull_request` to remove the security
vulnerability from our codebase.

PLATFORM-1429
… org

Update dependabot in line with the rest of the azimuth-cloud organisation
config.

PLATFORM-1429
@irt-shpc
irt-shpc requested a review from a team as a code owner October 6, 2026 16:25
amanning9
amanning9 previously approved these changes Oct 7, 2026
@m-bull
m-bull merged commit c2d8754 into main Oct 8, 2026
9 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants