diff options
| author | Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com> | 2026-06-17 13:51:53 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-17 13:51:53 -0400 |
| commit | 39fa027fdaa463b58c37b242f5ec221706ade131 (patch) | |
| tree | 2ddbcfc53840ba99a608fb2a72dd13c3ea7cb8dc /src/unsafe-pr-checkout-helper.ts | |
| parent | 165e782ebd15fb9e6952d7b714ca22c7a76c25f7 (diff) | |
update error wording (#2467)v7.0.0
Diffstat (limited to 'src/unsafe-pr-checkout-helper.ts')
| -rw-r--r-- | src/unsafe-pr-checkout-helper.ts | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/unsafe-pr-checkout-helper.ts b/src/unsafe-pr-checkout-helper.ts index 899ad1e..1235d87 100644 --- a/src/unsafe-pr-checkout-helper.ts +++ b/src/unsafe-pr-checkout-helper.ts @@ -75,9 +75,9 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void { `Refusing to check out fork pull request code from a '${eventName}' workflow. ` + `This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` + `cache scope, and runner access. Fetching and executing a fork's code in that trusted ` + - `context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` + - `the risks at https://gh.io/securely-using-pull_request_target, set ` + - `'allow-unsafe-pr-checkout: true' on the actions/checkout step.` + `context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` + + `at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` + + `on the actions/checkout step.` ) } |