GitHub will switch off pull_request_target for public repos on 2 November
Execution protections reach general availability, and with them a default rule that blocks the one trigger that runs fork code against your secrets.
Dev News Daily19 Sep2 min read