From: Patrick Donnelly <pdonnell@ibm.com>
Date: Thu, 30 Jul 2026 14:47:51 +0000 (-0400)
Subject: .github/workflows/pr-checklist: switch to pull_request_target and scope permissions
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=35060603bca6aa2e8205e6ffaa9dc2e6b2298f91;p=ceph.git

.github/workflows/pr-checklist: switch to pull_request_target and scope permissions

To make `main` the authoritative workflow source.

Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>
---

diff --git a/.github/workflows/pr-checklist.yml b/.github/workflows/pr-checklist.yml
index cf4b2b0a498c..325015622499 100644
--- a/.github/workflows/pr-checklist.yml
+++ b/.github/workflows/pr-checklist.yml
@@ -1,17 +1,22 @@
 ---
 name: "Pull Request Checklist"
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - main
     types:
       - edited
       - opened
       - reopened
+
+# https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#defining-access-for-the-github_token-scopes
+permissions:
+  pull-requests: read
+
 jobs:
   pr_checklist:
     runs-on: ubuntu-latest
-    name: Verify
+    name: Verify Checklist
     steps:
       - name: Sleep for 30 seconds
         run: sleep 30s