From eda26769e3befc3c82240e6a02610cfc20a2be3b Mon Sep 17 00:00:00 2001
From: schcamille <97245253+schcamille@users.noreply.github.com>
Date: Thu, 10 Jul 2025 16:01:48 +0200
Subject: [PATCH] Create vulnerable.yml

---
 .github/workflows/vulnerable.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/vulnerable.yml

diff --git a/.github/workflows/vulnerable.yml b/.github/workflows/vulnerable.yml
new file mode 100644
index 0000000..a85da6d
--- /dev/null
+++ b/.github/workflows/vulnerable.yml
@@ -0,0 +1,24 @@
+on: pull_request_target
+
+jobs:
+  build:
+    name: Build and test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - uses: actions/setup-node@v1
+      - run: |
+          npm install
+          npm build
+
+      - uses: completely/fakeaction@v2
+        with:
+          arg1: ${{ secrets.supersecret }}
+
+      - uses: fakerepo/comment-on-pr@v1
+        with:
+          message: |
+            Thank you!