mirror of
https://github.com/anchore/syft.git
synced 2026-03-29 21:23:24 +02:00
ci: further pr target code checkout assurances (#4695)
Signed-off-by: Weston Steimel <author@code.w.steimel.me.uk>
This commit is contained in:
parent
7800b16529
commit
f68a7cc899
1
.github/workflows/detect-schema-changes.yaml
vendored
1
.github/workflows/detect-schema-changes.yaml
vendored
@ -37,6 +37,7 @@ jobs:
|
||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
|
||||
with:
|
||||
persist-credentials: false
|
||||
repository: anchore/syft # IMPORTANT! An additional protection that this is checking out code from the expected repository
|
||||
ref: main # IMPORTANT! It is CRITICAL that this only ever considers the code from main and NEVER EVER from a fork.
|
||||
|
||||
- run: python .github/scripts/labeler.py
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user