docs: add pull_request_target prohibition and script injection guidance #371

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

walteck wants to merge 1 commit into main from chwa1-further-updates-on-actions-guidance

Open

docs: add pull_request_target prohibition and script injection guidance #371

including section on interpolation and pull_request_target

GitHub Advanced Security / SonarCloud succeeded Mar 27, 2026 in 2s

No new alerts in code changed by this pull request

View all branch alerts.