From 321c4fe677867c84308fb383bbbbb5a09d1453eb Mon Sep 17 00:00:00 2001 From: learnthusalearner Date: Fri, 21 Nov 2025 23:20:58 +0530 Subject: [PATCH] Low Priority changes --- .../actions/pull_request_target_needs_exception.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/semgrep-rules/actions/pull_request_target_needs_exception.yaml b/semgrep-rules/actions/pull_request_target_needs_exception.yaml index 2ab1a9e..55858ac 100644 --- a/semgrep-rules/actions/pull_request_target_needs_exception.yaml +++ b/semgrep-rules/actions/pull_request_target_needs_exception.yaml @@ -3,9 +3,10 @@ rules: languages: - yaml severity: ERROR - message: 'pull_request_target is considered very risky and should only be used when strictly needed. Please - prefer other triggers when possible. If you think this is needed, you can dismiss this alert and - merge your PR. More information: https://google.github.io/github-team/semgrep-rules/pull-request-target-needs-exception.html' + message: 'pull_request_target is a high-risk event and should only be used in exceptional cases. +Please choose a safer trigger whenever possible. +If you are certain this workflow requires pull_request_target, you may dismiss this alert and proceed with the merge. +For more details, see: https://google.github.io/github-team/semgrep-rules/pull-request-target-needs-exception.html' metadata: category: best-practice technology: