diff --git a/.github/workflows/airflow-apis-tests-3_9.yml b/.github/workflows/airflow-apis-tests-3_9.yml index d11468867cd..73f94a3283d 100644 --- a/.github/workflows/airflow-apis-tests-3_9.yml +++ b/.github/workflows/airflow-apis-tests-3_9.yml @@ -36,7 +36,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -45,7 +45,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/cypress-integration-tests-mysql.yml b/.github/workflows/cypress-integration-tests-mysql.yml index aed7f7487d4..db3f5ee0ea2 100644 --- a/.github/workflows/cypress-integration-tests-mysql.yml +++ b/.github/workflows/cypress-integration-tests-mysql.yml @@ -44,7 +44,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -53,7 +53,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/cypress-integration-tests-postgresql.yml b/.github/workflows/cypress-integration-tests-postgresql.yml index 529c2d90baf..382bc5c661a 100644 --- a/.github/workflows/cypress-integration-tests-postgresql.yml +++ b/.github/workflows/cypress-integration-tests-postgresql.yml @@ -44,7 +44,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -53,7 +53,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/java-checkstyle.yml b/.github/workflows/java-checkstyle.yml index 1ad15f04bd4..eae6d577c5e 100644 --- a/.github/workflows/java-checkstyle.yml +++ b/.github/workflows/java-checkstyle.yml @@ -33,7 +33,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -42,7 +42,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml index 066f5cc16df..ba540b76068 100644 --- a/.github/workflows/maven-build.yml +++ b/.github/workflows/maven-build.yml @@ -51,7 +51,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -60,7 +60,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/py-checkstyle.yml b/.github/workflows/py-checkstyle.yml index 4a281d4135d..ffa6d856fa4 100644 --- a/.github/workflows/py-checkstyle.yml +++ b/.github/workflows/py-checkstyle.yml @@ -37,7 +37,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -46,7 +46,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/py-tests.yml b/.github/workflows/py-tests.yml index 3e613e2315b..81dc11a2d71 100644 --- a/.github/workflows/py-tests.yml +++ b/.github/workflows/py-tests.yml @@ -35,7 +35,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -44,7 +44,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test' diff --git a/.github/workflows/yarn-coverage.yml b/.github/workflows/yarn-coverage.yml index 58bd1f3c4ed..ced3433b5e6 100644 --- a/.github/workflows/yarn-coverage.yml +++ b/.github/workflows/yarn-coverage.yml @@ -32,7 +32,7 @@ jobs: - name: Wait for the labeler uses: lewagon/wait-on-check-action@v1.2.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: ref: ${{ github.event.pull_request.head.sha }} check-name: Team Label @@ -41,7 +41,7 @@ jobs: - name: Verify PR labels uses: jesusvasquez333/verify-pr-label-action@v1.4.0 - if: github.event_name == 'pull_request' + if: ${{ github.event_name == 'pull_request_target' }} with: github-token: '${{ secrets.GITHUB_TOKEN }}' valid-labels: 'safe to test'