mirror of
https://github.com/actions/checkout.git
synced 2026-06-16 17:04:54 +08:00
update description and url again
This commit is contained in:
@@ -164,9 +164,9 @@ Please refer to the [release page](https://github.com/actions/checkout/releases/
|
||||
# Required to check out fork pull request code from a workflow triggered by
|
||||
# `pull_request_target` or `workflow_run`. These workflows run with the base
|
||||
# repository's GITHUB_TOKEN, secrets, default-branch cache scope, and runner
|
||||
# access; fetching a fork's code in that trusted context is a "pwn request"
|
||||
# supply-chain attack pattern. Set to `true` only after reviewing the risks at
|
||||
# https://gh.io/allow-unsafe-pr-checkout.
|
||||
# access; fetching and executing a fork's code in that trusted context commonly
|
||||
# leads to "pwn request" vulnerabilities. Set to `true` only after reviewing the
|
||||
# risks at https://gh.io/securely-using-pull-request-checkout.
|
||||
# Default: false
|
||||
allow-unsafe-pr-checkout: ''
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user