Merge pull request #110 from voxpupuli/switch_token

fix: switch to ro token to use pull_request_target somewhat more safely
voxpupuli · Aug 27, 2024 · c07dc1b · c07dc1b
2 parents 1080242 + 2a81452
commit c07dc1b
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -2,9 +2,7 @@
 name: CI🚦
 
 on:
-  pull_request:
-    branches:
-      - main
+  pull_request_target:
   workflow_dispatch:
 
 jobs:
@@ -55,7 +53,7 @@ jobs:
         uses: docker/login-action@v3
         with:
           username: voxpupulibot
-          password: ${{ secrets.DOCKERHUB_BOT_PASSWORD }}
+          password: ${{ secrets.DOCKERHUB_BOT_RO_PASSWORD }}
 
       - name: Analyze container image for CVEs
         id: analyze-image-cves