[Security] Dangerous-Workflow

https://github.com/Ludy87/test_java/security/code-scanning/26
This commit is contained in:
Ludy87 2024-12-21 23:15:24 +01:00
parent 46261c55b5
commit 12e8aceb4c
No known key found for this signature in database
GPG Key ID: 92696155E0220F94

View File

@ -31,9 +31,11 @@ jobs:
- name: Checkout PR branch - name: Checkout PR branch
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
env:
PULL_REQUEST_REF: ${{ github.event.pull_request.head.ref }}
with: with:
repository: ${{ github.event.pull_request.head.repo.full_name }} repository: ${{ github.event.pull_request.head.repo.full_name }}
ref: "${{ github.event.pull_request.merge_commit_sha }}" ref: $PULL_REQUEST_REF
path: pr-branch path: pr-branch
fetch-depth: 0 fetch-depth: 0