pull-request-target

Here are 3 public repositories matching this topic...

MrLouisWright / workflow-sentinel

Harden GitHub Actions: flags unpinned actions, broad or missing permissions, pull_request_target pwn requests, script injection, leaked secrets, persisted credentials, self-hosted PR runners, curl|bash, deprecated commands and undigested images, with a fix for each. --fix pins SHAs. Text, JSON, SARIF, Markdown; GitHub Action included.

security workflow ci script-injection pinning sarif github-actions supply-chain-security pull-request-target sha-pinning

Updated Oct 15, 2026
JavaScript

nilsreichardt / verify-safe-to-test-label

Sponsor

Star

Secure pull_request_target workflows by requiring maintainer approval for fork-based PRs.

security pull-requests cicd github-actions pull-request-target

Updated Mar 26, 2026
JavaScript

UniteAndCreateForLife / prt-check

Star

Is your repo ready for GitHub's 2026 pull_request_target changes? Finds workflows hit by the Nov 2 default block and actions/checkout's fork refusal. CLI + GitHub Action, no dependencies.

security ci devsecops github-actions github-action supply-chain-security pull-request-target

Updated Sep 28, 2026
Python

Add this topic to your repo

To associate your repository with the pull-request-target topic, visit your repo's landing page and select "manage topics."

Learn more