From 5b6828ece515d606402d3cf86d9d5c92a0d3cac5 Mon Sep 17 00:00:00 2001
From: Barry Gordon <brrygrdn@github.com>
Date: Wed, 23 Feb 2022 12:51:55 +0000
Subject: [PATCH] Use the correct event trigger

---
 .github/workflows/dependabot-build.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index 59b4855..5761517 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -2,7 +2,7 @@ name: Compile dependabot updates
 
 on:
   workflow_dispatch:
-  pull_request_target:
+  pull_request:
 
 permissions:
   pull-requests: write
@@ -26,6 +26,8 @@ jobs:
     if: ${{ needs.fetch-dependabot-metadata.outputs.dependency-type == 'direct:production' }}
     steps:
       - uses: actions/checkout@v2
+        with:
+          ref: ${{ github.event.pull_request.head }}
 
       - name: Read .nvmrc
         id: nvm
@@ -48,4 +50,4 @@ jobs:
           git config user.name github-actions
           git config user.email github-actions@github.com
           git commit -m "[dependabot skip] Update dist/ with build changes" || exit 0
-          git push
+          git push ${{ github.event.pull_request.head }} origin:${{ github.event.pull_request.head }}