name: 'Lint PR' on: pull_request_target: # zizmor: ignore[dangerous-triggers] this is the only way, and we're not running user code types: - opened - edited - reopened - synchronize jobs: main: name: Validate PR title runs-on: ubuntu-latest permissions: pull-requests: read steps: - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}