nix/12.nixvim
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 7

ci/pr-merged: explicitly checkout base_ref

Browse source 
This _should_ be the default, but actions/checkout is still complaining
about checking out untrusted PR code.

Technically, this workflow only runs on `merged` PRs, so the PR code _is_
trusted anyway. But currently there's no need to use the PR's code.
This commit is contained in:
Matt Sturgeon 2026-07-01 14:13:10 +01:00
parent 266d5c31d5
commit be307b6b8f
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/pr-merged.yml vendored
View file

@ -77,6 +77,7 @@ jobs:
id: checkout
uses: actions/checkout@v7
with:
ref: ${{ github.base_ref }}
sparse-checkout: |
flake/dev/diff-plugins.py
flake.lock