Use pull_request_target for CodeQL workflow.

jenkinsci · Nov 13, 2024 · eb208f5 · eb208f5
1 parent 4cd236b
commit eb208f5
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -3,12 +3,8 @@ name: "CodeQL"
 on:
   push:
     branches:
-      - master
-      - main
-  pull_request:
-    branches:
-      - master
       - main
+  pull_request_target:
   schedule:
     - cron: "32 3 * * 0"
 
@@ -49,7 +45,7 @@ jobs:
           queries: +security-and-quality
 
       - name: Build with Maven
-        run: mvn -V --color always -ntp clean verify --file pom.xml -Pskip
+        run: mvn -V --color always -ntp clean verify -Pskip
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3