mirror of
https://code.forgejo.org/actions/checkout.git
synced 2026-07-01 09:08:56 +00:00
update urls
This commit is contained in:
parent
c2edb9a740
commit
678aa28ba1
4 changed files with 16 additions and 8 deletions
5
dist/index.js
vendored
5
dist/index.js
vendored
|
|
@ -2833,8 +2833,9 @@ function assertSafePrCheckout(input) {
|
|||
throw new Error(`Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
|
||||
`This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
|
||||
`cache scope, and runner access. Fetching fork's code in that trusted context is a ` +
|
||||
`"pwn request" supply-chain attack pattern. To opt in after reviewing the risk, set ` +
|
||||
`'allow-unsafe-pr-checkout: true' on the actions/checkout step.`);
|
||||
`"pwn request" supply-chain attack pattern. To opt in after reviewing the risks at ` +
|
||||
`https://gh.io/allow-unsafe-pr-checkout, set 'allow-unsafe-pr-checkout: true' on the ` +
|
||||
`actions/checkout step.`);
|
||||
}
|
||||
function pushIfSha(target, value) {
|
||||
if (typeof value === 'string' && value.length > 0) {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue