FYI: Using the action like in the example would make you vulnerable to pwn requests

[ST-DDT]

The current run-nothing example is safe, but running anything in there that uses the source code is dangerous as it uses elevated permissions.
I'll recommend rewriting the example or raising awareness by adding a comment.

payBox/.github/workflows/pr.yml

Lines 18 to 19 in 88f24b6

	echo "Running frontend tests..."
	# Put your commands for running frontend tests here

payBox/.github/workflows/pr.yml

Lines 24 to 25 in 88f24b6

	echo "Running backend tests..."
	# Put your commands for running backend tests here

• https://securitylab.github.com/research/github-actions-preventing-pwn-requests
• Description seems dangerous actions/labeler#755 (comment)

[github-actions]

Stale issue message