mirror of
https://gitea.com/actions/checkout.git
synced 2026-06-16 07:40:09 -05:00
edit url one more time
This commit is contained in:
@@ -76,7 +76,7 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void {
|
||||
`This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
|
||||
`cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
|
||||
`context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
|
||||
`the risks at https://gh.io/securely-using-pull-request-checkout, set ` +
|
||||
`the risks at https://gh.io/securely-using-pull_request_target, set ` +
|
||||
`'allow-unsafe-pr-checkout: true' on the actions/checkout step.`
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user