mumrah opened a new pull request, #16936:
URL: https://github.com/apache/kafka/pull/16936

   Github has different behavior for PRs within apache/kafka and those from 
public forks. For security reasons, ASF Infra disallows forks to trigger 
workflows using the `pull_request` event (as this would expose repository 
secrets). Instead, we can use the `pull_request_target` event which triggers 
when a fork creates a PR. This event will cause the workflow to run using the 
code of the PR target (i.e., trunk).
   
   Per the ASF Infra policy 
https://infra.apache.org/github-actions-policy.html, we must take care not to 
inject secrets into `pull_request_target` workflows. For this reason, I've 
created a separate "Public Pull Requests" workflow that does not public 
Develocity build scans.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to