When will GitHub deprecate pull_request_target and make something where any shar... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

LelouBil 44 days ago | parent | context | favorite | on: Postmortem: TanStack NPM supply-chain compromise

When will GitHub deprecate pull_request_target and make something where any shared aspect (like cache or secrets) are explicitly opt-in in the YAML ?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact