# Update assign-reviewers workflow for fork PR support \(\#51876\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/10ddd9085d7bcff57838dfc387abd9c9abbba758)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 10ddd9085d7bcff57838dfc387abd9c9abbba758

Requested commit: 10ddd9085d7bcff57838dfc387abd9c9abbba758

Commit: 10ddd9085d7bcff57838dfc387abd9c9abbba758

Tree: 8a5f88b038180d6632932d6043499485082bd90a

Author: John D\. Swanson

Committer: GitHub

## Message

```
Update assign-reviewers workflow for fork PR support (#51876)

## Summary

Deploy updated `assign-reviewers.yml` from
[codeowner-coordinator#83](https://github.com/zed-industries/codeowner-coordinator/pull/83):

- Switch trigger from `pull_request` to `pull_request_target` to support
fork PRs and fix `author_association` misclassification bug (org members
reported as `COLLABORATOR`)
- Remove `author_association` filter and fork gate — reviewer
assignments are inherently scoped to org team members by the GitHub
Teams API
- Remove `--min-association member` from script invocation
- Add `SECURITY INVARIANTS` comment block documenting
`pull_request_target` safety requirements
- Add concurrency guard to prevent duplicate runs per PR
- Add `--require-hashes` + SHA256 pin for pyyaml install

## Test plan

- [ ] Verify a fork PR triggers the workflow and receives team
assignment
- [ ] Verify a draft→ready PR triggers correctly
- [ ] Verify org member PRs continue to work

Release Notes:

- N/A
```

## Parents

- [2cc7d17f345df9fdf8c062cbcc041af7e9fd6c9c](https://git.cafe/gitcafe/zed/commit/2cc7d17f345df9fdf8c062cbcc041af7e9fd6c9c?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/10ddd9085d7bcff57838dfc387abd9c9abbba758?format=markdown)