mirror of
https://github.com/HDFGroup/hdf5.git
synced 2026-09-25 04:09:44 +03:00
These workflows use pull_request_target / workflow_run with elevated permissions (pull-requests: write, issues: write). Because GitHub copies workflow files into forks, any fork with Actions enabled was independently running these privileged workflows against its own PRs, e.g. https://github.com/sp26-hdfgroup/hdf5-sandbox/pull/2. Add the same github.repository == 'HDFGroup/hdf5' guard already used in review-checklist-test.yml so the job-level if short-circuits before doing anything in a fork's copy of the workflow.