Repository navigation
revert workflow warning: "GitHub will restrict pull_request_target on public repositories by default. To continue allowing the event trigger, configure an Actions policy." #193185
Description
Help us understand the severity of this issue
- breakage; unable to contribute or trigger builds will no workarounds
- inconvenient workarounds exist, but significant effort required
- needed for a Flutter team-wide priority (already agreed upon)
- nice-to-have; none of the above
What do you need help with
[Workflow execution policy warning (evaluate mode): .github/workflows/revert.yml#L1](https://github.com/flutter/flutter/actions/runs/35780011740/workflow)
On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
flutter/.github/workflows/revert.yml
Lines 3 to 4 in 72dc94b
Activity
jtmcdole commentedon Oct 27, 2026
we have internal levers we have to pull, but once they are pulled i can turn on the Actions policy flags.
eyebrowsoffire commentedon Oct 28, 2026
I have a plan here for how to resolve this in
flutter/flutterand stop usingpull_request_targetaltogether.Replace pull_request_target workflows with pull_request + workflow_run (
[ci] Remove `pull_request_target` workflows (#13581)