Pull Request

Securing External PRs in GitHub Actions: pull_request, Permissions, and Workflow Isolation