summary refs log tree commit diff
path: root/.github/workflows/pending-set.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/pending-set.yml')
-rw-r--r--.github/workflows/pending-set.yml5
1 files changed, 5 insertions, 0 deletions
diff --git a/.github/workflows/pending-set.yml b/.github/workflows/pending-set.yml
index 944d1deefb9..b15e4847e67 100644
--- a/.github/workflows/pending-set.yml
+++ b/.github/workflows/pending-set.yml
@@ -3,6 +3,11 @@ name: "set pending status"
 on:
   pull_request_target:
 
+# WARNING:
+# When extending this action, be aware that $GITHUB_TOKEN allows write access to
+# the GitHub repository. This means that it should not evaluate user input in a
+# way that allows code injection.
+
 jobs:
   action:
     runs-on: ubuntu-latest