From d7b6e1aea9905d34a97348f70884f00fffc5cd6d Mon Sep 17 00:00:00 2001
From: schcamille <97245253+schcamille@users.noreply.github.com>
Date: Tue, 15 Jul 2025 10:06:00 +0200
Subject: [PATCH] Create vulnerable.yml

---
 .github/workflows/vulnerable.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .github/workflows/vulnerable.yml

diff --git a/.github/workflows/vulnerable.yml b/.github/workflows/vulnerable.yml
new file mode 100644
index 0000000..f609898
--- /dev/null
+++ b/.github/workflows/vulnerable.yml
@@ -0,0 +1,23 @@
+on: pull_request_target
+
+jobs:
+  build:
+    name: Build and test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - uses: actions/setup-node@v1
+      - run: |
+          npm install
+          npm build
+      - uses: completely/fakeaction@v2
+        with:
+          arg1: ${{ secrets.supersecret }}
+
+      - uses: fakerepo/comment-on-pr@v1
+        with:
+          message: |
+            Thank you!