mirror of
https://code.forgejo.org/actions/checkout.git
synced 2026-06-26 22:59:00 +00:00
block checking out fork pr for some events
This commit is contained in:
parent
df4cb1c069
commit
b8447332b0
10 changed files with 474 additions and 2 deletions
|
|
@ -98,6 +98,12 @@ inputs:
|
|||
github-server-url:
|
||||
description: The base URL for the GitHub instance that you are trying to clone from, will use environment defaults to fetch from the same instance that the workflow is running from unless specified. Example URLs are https://github.com or https://my-ghes-server.example.com
|
||||
required: false
|
||||
allow-unsafe-pr-checkout:
|
||||
description: >
|
||||
Required to check out fork pull request code from a workflow triggered by
|
||||
`pull_request_target` or `workflow_run`. See [Pwn Requests](todo:need-link)
|
||||
for the risks. Set to `true` only after reviewing the risks.
|
||||
default: false
|
||||
outputs:
|
||||
ref:
|
||||
description: 'The branch, tag or SHA that was checked out'
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue