preview secure

https://securitylab.github.com/research/github-actions-preventing-pwn-requests
xxx-fed · Jan 15, 2021 · e4567e2 · e4567e2
1 parent f11d857
commit e4567e2
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
@@ -1,10 +1,13 @@
 name: 🔂 Surge PR Preview
 
-on: pull_request_target
+on:
+  pull_request_target:
+    types: [labeled]
 
 jobs:
   preview:
     runs-on: ubuntu-latest
+    if: contains(github.event.pull_request.labels.*.name, 'SurgePreview')
     steps:
       - uses: actions/checkout@v2
         with: