jiayuasu opened a new pull request, #2648:
URL: https://github.com/apache/sedona/pull/2648

   ## Did you read the Contributor Guide?
   
   - Yes, I have read the [Contributor 
Rules](https://sedona.apache.org/latest/community/rule/) and [Contributor 
Development Guide](https://sedona.apache.org/latest/community/develop/)
   
   ## Is this PR related to a ticket?
   
   - Yes, and the PR name follows the format `[GH-XXX] my subject`. Closes #2645
   
   ## What changes were proposed in this PR?
   
   Replace `pull_request_target` trigger with `pull_request` in the Pull 
Request Labeler workflow (`.github/workflows/labeler.yml`).
   
   ASF Infrastructure flagged this as a policy violation because 
`pull_request_target` runs with elevated permissions and can be exploited by 
malicious PRs from forks. The `pull_request` trigger is the safe alternative.
   
   ## How was this patch tested?
   
   This is a CI configuration change. The labeler workflow will be tested 
automatically when a PR is opened.
   
   ## Did this PR include necessary docu## Did this PRtes?
   
   - No, this PR does not affect any public API so no need to change the 
documentation.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to