File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -42023,9 +42023,9 @@ function assertSafePrCheckout(input) {
4202342023 throw new Error(`Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
4202442024 `This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
4202542025 `cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
42026- `context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
42027- `the risks at https://gh.io/securely-using-pull_request_target, set ` +
42028- `'allow-unsafe-pr-checkout: true' on the actions/checkout step.`);
42026+ `context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
42027+ `at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
42028+ `on the actions/checkout step.`);
4202942029}
4203042030function pushIfSha(target, value) {
4203142031 if (typeof value === 'string' && value.length > 0) {
Original file line number Diff line number Diff line change @@ -75,9 +75,9 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void {
7575 `Refusing to check out fork pull request code from a '${ eventName } ' workflow. ` +
7676 `This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
7777 `cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
78- `context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
79- `the risks at https://gh.io/securely-using-pull_request_target, set ` +
80- `'allow-unsafe-pr-checkout: true' on the actions/checkout step.`
78+ `context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
79+ `at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
80+ `on the actions/checkout step.`
8181 )
8282}
8383
You can’t perform that action at this time.
0 commit comments