actions/checkout
1
0
Fork 0
mirror of https://github.com/actions/checkout.git synced 2026-06-16 14:04:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

update urls

Browse Source
This commit is contained in:
Aiqiao Yan
2026-06-15 20:07:36 +00:00
parent c2edb9a740
commit 678aa28ba1
4 changed files with 16 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
action.yml
+5 -2
View File
@@ -101,8 +101,11 @@ inputs:
allow-unsafe-pr-checkout:
description: >
Required to check out fork pull request code from a workflow triggered by
`pull_request_target` or `workflow_run`. See [Pwn Requests](todo:need-link)
for the risks. Set to `true` only after reviewing the risks.
`pull_request_target` or `workflow_run`. These workflows run with the
base repository's GITHUB_TOKEN, secrets, default-branch cache scope, and
runner access; fetching a fork's code in that trusted context is a
"pwn request" supply-chain attack pattern. Set to `true` only after
reviewing the risks at https://gh.io/allow-unsafe-pr-checkout.
default: false
outputs:
ref: