[web-php] master: Update GitHub Actions permissions for pull request handling
| From: | Luffy via Derick Rethans | Date: | Thu, 09 Jul 2026 12:49:54 +0000 |
| Subject: | [web-php] master: Update GitHub Actions permissions for pull request handling | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-33867@lists.php.net to get a copy of this message | ||
Author: Luffy (sy-records)
Committer: Derick Rethans (derickr)
Date: 2026-07-09T13:49:52+01:00
Commit: https://github.com/php/web-php/commit/fed892e3ce5fc2714a39a28c9fe2b4cb754af825
Raw diff: https://github.com/php/web-php/commit/fed892e3ce5fc2714a39a28c9fe2b4cb754af825.diff
Update GitHub Actions permissions for pull request handling
Changed paths:
M .github/workflows/preview-deploy.yml
Diff:
diff --git a/.github/workflows/preview-deploy.yml b/.github/workflows/preview-deploy.yml
index 7a9c6e27c9..0e241365c0 100644
--- a/.github/workflows/preview-deploy.yml
+++ b/.github/workflows/preview-deploy.yml
@@ -5,12 +5,18 @@ on:
types:
- completed
+# pull_request_target needs explicit perms; fork PRs default to read-only.
+permissions:
+ contents: read
+ issues: write
+ pull-requests: write
+
jobs:
deploy:
runs-on: "ubuntu-22.04"
if: >
github.repository_owner == 'php' &&
- github.event.workflow_run.event == 'pull_request'
+ github.event.workflow_run.event == 'pull_request_target'
steps:
- name: Download PR number