From Dev.to
GitHub pull_request_target Block: Audit Before Monday
From 2 December 2026, GitHub Actions will block pull_request_target workflows by default in every public repository. The trigger runs in your base repository's context, with access to its secrets, so...