ci(pr-title): revert to pull_request — pull_request_target can't run a workflow new in the PR

A pull_request_target workflow executes from the BASE branch, so pr-title.yml
(added in this PR, absent on develop) never runs under it — leaving the required
'Validate PR Title' check stuck in Expected. Back to pull_request so the check
runs from the PR branch. The fork-PR write-token improvement can be revisited in
a follow-up once this workflow exists on develop. Keep the success() guard and
the per-PR concurrency group.
This commit is contained in:
Gauvain
2026-07-07 00:41:46 +02:00
parent a48416967e
commit 0966186e81

View File

@@ -1,19 +1,13 @@
name: 📝 PR Title
# pull_request_target so fork PRs get a write token — this workflow only reads
# the PR title and posts/updates a sticky comment; it never checks out or runs
# PR code, so it is not exposed to the usual _target code-execution risk.
on:
pull_request_target:
pull_request:
types: [opened, edited, synchronize, reopened]
branches: [develop, master]
permissions:
contents: read
# Key on the PR number, not github.ref: under pull_request_target github.ref is
# the base branch (shared by every PR), which would collapse all PRs into one
# group and cross-cancel their title checks.
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
cancel-in-progress: true