Safer pull_request_target defaults for GitHub Actions checkout - GitHub Changelog
…This pattern is known as a “pwn request,” and it has been the root cause of multiple supply-chain incidents across the ecosystem. For more information, see our blog posts about helping…
