oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-03-30 05:33:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci: add explicit ref to main and warning for pull_request_target workflow (#4693)

Browse Source 
Signed-off-by: Weston Steimel <author@code.w.steimel.me.uk>
This commit is contained in:
Weston Steimel 2026-03-23 16:45:18 +00:00 committed by GitHub
parent 8531e1917b
commit f5d318d934
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.github/workflows/detect-schema-changes.yaml vendored
View File

@ -37,6 +37,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
with: with:
persist-credentials: false persist-credentials: false
ref: main # IMPORTANT! It is CRITICAL that this only ever considers the code from main and NEVER EVER from a fork.
- run: python .github/scripts/labeler.py - run: python .github/scripts/labeler.py
env: env: