github: Safer pull_request_target defaults for GitHub Actions checkout

1 · Sujith Quintelier · June 19, 2026, 5:01 a.m.
github GitHub Actions Security software development
Summary
GitHub is updating the default settings for the Actions checkout action in workflows triggered by pull_request_target to enhance security by preventing exposure of sensitive credentials to untrusted pull request code.
Read full post on quintelier.dev →
AUTHOR