From 7ffdf4e6e1ffbb8066aaebf0f6432d5181db00b9 Mon Sep 17 00:00:00 2001
From: Arpit Jain <167312832+arpit-jn@users.noreply.github.com>
Date: Mon, 16 Sep 2024 14:03:57 +0530
Subject: [PATCH] Changed pull_request_target to pull_request (#772)

### Changes

<!--
  Change pull_request_target to pull_request for better security.
Remove the authorize job from the list of jobs defined in that workflow.
Remove the dependency on authorize job for other jobs in that workflow
by looking for the line needs: authorize.
-->

### Contributor Checklist

- [ ] I agree to adhere to the [Auth0 General Contribution
Guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md).
- [ ] I agree to uphold the [Auth0 Code of
Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md).
---
 .github/workflows/semgrep.yml | 11 +----------
 .github/workflows/snyk.yml    | 10 +---------
 .github/workflows/tests.yml   | 10 +---------
 3 files changed, 3 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index e53b2034..514ae7db 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -2,7 +2,7 @@ name: Semgrep
 
 on:
   merge_group:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - synchronize
@@ -20,16 +20,7 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
-  authorize:
-    name: Authorize
-    environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
-    runs-on: ubuntu-latest
-    steps:
-      - run: true
-
   check:
-    needs: authorize
-
     name: Check for Vulnerabilities
     runs-on: ubuntu-latest
 
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
index d0984118..ff223047 100644
--- a/.github/workflows/snyk.yml
+++ b/.github/workflows/snyk.yml
@@ -2,7 +2,7 @@ name: Snyk
 
 on:
   merge_group:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - synchronize
@@ -26,16 +26,8 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
-  authorize:
-    name: Authorize
-    environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
-    runs-on: ubuntu-latest
-    steps:
-      - run: true
-
   configure:
     name: Configure
-    needs: [authorize]
     runs-on: ubuntu-latest
 
     outputs:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 09d1f6b2..eee49247 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -2,7 +2,7 @@ name: Build and Test
 
 on:
   merge_group:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - synchronize
@@ -17,16 +17,8 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
-  authorize:
-    name: Authorize
-    environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
-    runs-on: ubuntu-latest
-    steps:
-      - run: true
-
   configure:
     name: Configure
-    needs: [authorize]
     runs-on: ubuntu-latest
 
     outputs: