diff --git a/.github/workflows/pull-target-e2e.yml b/.github/workflows/pull-target-e2e.yml index 9a492d3e..403ac605 100644 --- a/.github/workflows/pull-target-e2e.yml +++ b/.github/workflows/pull-target-e2e.yml @@ -1,9 +1,9 @@ name: pull-target-e2e ## NOTE: This workflow uses the GitHub event `pull_request_target`, which uses the base commit instead of the head. -# Therefore, the source for the e2e tests and `make deploy` will be from base. +# Therefore, the source used for the e2e tests and `make deploy` will be from base, rather than the pull request. # Reference(s): -# - https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target +# - https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target/ # - https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ on: