Skip to content

Commit 9c091bb

Browse files
authored
update error wording (#2467)
1 parent 1044a6d commit 9c091bb

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

dist/index.js

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42023,9 +42023,9 @@ function assertSafePrCheckout(input) {
4202342023
throw new Error(`Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
4202442024
`This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
4202542025
`cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
42026-
`context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
42027-
`the risks at https://gh.io/securely-using-pull_request_target, set ` +
42028-
`'allow-unsafe-pr-checkout: true' on the actions/checkout step.`);
42026+
`context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
42027+
`at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
42028+
`on the actions/checkout step.`);
4202942029
}
4203042030
function pushIfSha(target, value) {
4203142031
if (typeof value === 'string' && value.length > 0) {

src/unsafe-pr-checkout-helper.ts

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -75,9 +75,9 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void {
7575
`Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
7676
`This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
7777
`cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
78-
`context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
79-
`the risks at https://gh.io/securely-using-pull_request_target, set ` +
80-
`'allow-unsafe-pr-checkout: true' on the actions/checkout step.`
78+
`context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
79+
`at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
80+
`on the actions/checkout step.`
8181
)
8282
}
8383

0 commit comments

Comments
 (0)