pull_request_target workflow exposes repository secrets to external forks

Snyk insight details requires a free account. Sign in with Google or GitHub to access the full knowledge base.