1 story taggedpwn request.
From 18 June 2026, the updated action blocks malicious code execution through pull_request_target workflows.