summary refs log tree commit diff
path: root/.github/workflows/backport.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/backport.yml')
-rw-r--r--.github/workflows/backport.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index bcb164a04ee..4ee5adfaac1 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -2,6 +2,12 @@ name: Backport
 on:
   pull_request_target:
     types: [closed, labeled]
+
+# WARNING:
+# When extending this action, be aware that $GITHUB_TOKEN allows write access to
+# the GitHub repository. This means that it should not evaluate user input in a
+# way that allows code injection.
+
 jobs:
   backport:
     name: Backport Pull Request