dont use pull_request_target as it opens the repo for pwnage..

2026-07-27 19:56:50 +00:00 · 2024-06-17 11:25:07 +02:00
parent f539e03c7e
commit efc9fb9736
1 changed files with 0 additions and 2 deletions
@@ -12,8 +12,6 @@ jobs:
      options: --user root
    steps:
      - uses: actions/checkout@v4
-        with:
-          ref: '${{ github.event.pull_request.merge_commit_sha }}' # since event is pull_request_target
      - name: Install Packages
        run: yarn install --frozen-lockfile
      - name: Build