From 05d39853ce09c4e1fe0881f3ad852c9b84bdecb5 Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Mon, 19 May 2025 10:08:17 -0700
Subject: [PATCH 1/2] switches pull_request_target to pull_request for
 appinspect. We still allow the labeler to be pull_request_target to properly
 label incoming PRs.

---
 .github/workflows/appinspect.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/appinspect.yml b/.github/workflows/appinspect.yml
index dd6c26029f..323c2051c3 100644
--- a/.github/workflows/appinspect.yml
+++ b/.github/workflows/appinspect.yml
@@ -1,6 +1,6 @@
 name: appinspect
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, reopened, synchronize]
 jobs:
   appinspect:

From b0565ae791817b39b167da18bed0bc375f38e926 Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Mon, 19 May 2025 11:57:20 -0700
Subject: [PATCH 2/2] run on pull_requests opened by members of the repo and on
 a push to develop, which also occurs when merging an internal or external PR

---
 .github/workflows/appinspect.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/appinspect.yml b/.github/workflows/appinspect.yml
index 323c2051c3..6af640aff2 100644
--- a/.github/workflows/appinspect.yml
+++ b/.github/workflows/appinspect.yml
@@ -2,6 +2,9 @@ name: appinspect
 on:
   pull_request:
     types: [opened, reopened, synchronize]
+  push:
+    branches:
+      - develop
 jobs:
   appinspect:
     runs-on: ubuntu-latest