fix: switch to ro token to use pull_request_target somewhat more safely

Signed-off-by: Robert Waffen <rwaffen@gmail.com>
voxpupuli · Aug 27, 2024 · d7dc6e9 · d7dc6e9
1 parent 1080242
commit d7dc6e9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -2,7 +2,7 @@
 name: CI🚦
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - main
   workflow_dispatch:
@@ -55,7 +55,7 @@ jobs:
         uses: docker/login-action@v3
         with:
           username: voxpupulibot
-          password: ${{ secrets.DOCKERHUB_BOT_PASSWORD }}
+          password: ${{ secrets.DOCKERHUB_BOT_RO_PASSWORD }}
 
       - name: Analyze container image for CVEs
         id: analyze-image-cves