Skip to content

block checking out fork pr for some events#2454

Draft
aiqiaoy wants to merge 1 commit into
mainfrom
enforce-safe-checkout
Draft

block checking out fork pr for some events#2454
aiqiaoy wants to merge 1 commit into
mainfrom
enforce-safe-checkout

Conversation

@aiqiaoy

@aiqiaoy aiqiaoy commented Jun 12, 2026

Copy link
Copy Markdown

No description provided.

Comment thread dist/index.js
// Determine the GitHub URL that the repository is being hosted from
result.githubServerUrl = core.getInput('github-server-url');
core.debug(`GitHub Host URL = ${result.githubServerUrl}`);
// Allow unsafe PR checkout (opt-in for pull_request_target / workflow_run fork PRs)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can this apply to merge/head ref + issue_comment constructions by default as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants