actions/checkout
3
0
Fork 0
mirror of https://code.forgejo.org/actions/checkout.git synced 2026-07-03 01:56:09 +00:00
Code Activity

Merge 29092a1639 into 1044a6dea9

Browse source
This commit is contained in:
Aiqiao Yan 2026-06-17 16:01:26 +00:00 • committed by GitHub
commit 4e2e9b966b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 21140 additions and 26258 deletions
Download patch file Download diff file Expand all files Collapse all files

47392
dist/index.js vendored
View file

File diff suppressed because one or more lines are too long

6
src/unsafe-pr-checkout-helper.ts
View file

@ -75,9 +75,9 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void {
`Refusing to check out fork pull request code from a '${eventName}' workflow. ` + `Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
`This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` + `This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
`cache scope, and runner access. Fetching and executing a fork's code in that trusted ` + `cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
`context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` + `context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
`the risks at https://gh.io/securely-using-pull_request_target, set ` + `at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
`'allow-unsafe-pr-checkout: true' on the actions/checkout step.` `on the actions/checkout step.`
) )
} }