Fix pull request labeler permissions

- https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
smallstep · Jul 16, 2021 · a990df5 · a990df5
1 parent 0a79aca
commit a990df5
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -1,13 +1,11 @@
-name: labeler
+name: Pull Request Labeler
 on:
-  pull_request:
-    branches:
-      - master
+  pull_request_target
 
 jobs:
   label:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v3
+    - uses: actions/labeler@v3.0.2
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"