ci: further pr target code checkout assurances (#4695)

Signed-off-by: Weston Steimel <author@code.w.steimel.me.uk>
This commit is contained in:
Weston Steimel 2026-03-24 11:16:16 +00:00 committed by GitHub
parent 7800b16529
commit f68a7cc899
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -37,6 +37,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
with:
persist-credentials: false
repository: anchore/syft # IMPORTANT! An additional protection that this is checking out code from the expected repository
ref: main # IMPORTANT! It is CRITICAL that this only ever considers the code from main and NEVER EVER from a fork.
- run: python .github/scripts/labeler.py