block checking out fork pr for pull_request_target and workflow_run (#2454)

* block checking out fork pr for some events * address copilot and reviewer feedback * run prettier formatting * build * update urls * update readme * update description and url again * edit url one more time
2026-06-17 00:01:17 +08:00 · 2026-06-16 10:03:43 -04:00
parent df4cb1c069
commit f9e715a95f
10 changed files with 509 additions and 2 deletions
--- a/test/git-auth-helper.test.ts
+++ b/test/git-auth-helper.test.ts
@@ -1173,7 +1173,8 @@ async function setup(testName: string): Promise<void> {
    sshUser: '',
    workflowOrganizationId: 123456,
    setSafeDirectory: true,
-    githubServerUrl: githubServerUrl
+    githubServerUrl: githubServerUrl,
+    allowUnsafePrCheckout: false
  }
 }