gh ci security

gh-ci-security.md

pull_request_target

• What is the difference between pull_request and pull_request_target event in GitHubActions
• pull_request
• pull_request_target
• When to Use pull_request_target Instead of pull_request in GitHub Actions
• GitHub Actions improvements for fork and pull request workflows

general

• GitHub's Secure use reference
• Configuring default setup for code scanning
• How to protect github actions workflow files.
• GitHub Actions & Security: Best practices - Forking Action repositories
• 7 GitHub Actions Security Best Practices (With Checklist)