pull_request_target misconfiguration
Named by 2 kept items in this workspace.
Search every workspace for pull_request_target misconfiguration. It matches the name as written, so it can find other things that share it.
The items that name it 2
GitHub Actions workflow misconfiguration exploited to exfiltrate organization and repository secrets, as occurred in the trivy-action compromise (March 2026)
Dangerous trigger that runs workflow from base branch (trusted) but can be manipulated via checked-out artifacts from an untrusted fork PR, granting access to secrets and write permissions
All techniques in this workspace.