From 90723f5985926a25e7ccfe67fdcc242120503361 Mon Sep 17 00:00:00 2001
From: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:34:20 -0400
Subject: backport `allow-unsafe-pr-checkout` to v3 (#2503)

* block checking out fork pr for pull_request_target and workflow_run (#2454)

* block checking out fork pr for some events

* address copilot and reviewer feedback

* run prettier formatting

* build

* update urls

* update readme

* update description and url again

* edit url one more time

* update error wording (#2467)

* Upgrade upload-artifact action to version 4
---
 __test__/git-auth-helper.test.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to '__test__/git-auth-helper.test.ts')

diff --git a/__test__/git-auth-helper.test.ts b/__test__/git-auth-helper.test.ts
index 8e580c1..8d20492 100644
--- a/__test__/git-auth-helper.test.ts
+++ b/__test__/git-auth-helper.test.ts
@@ -819,7 +819,8 @@ async function setup(testName: string): Promise<void> {
     sshStrict: true,
     workflowOrganizationId: 123456,
     setSafeDirectory: true,
-    githubServerUrl: githubServerUrl
+    githubServerUrl: githubServerUrl,
+    allowUnsafePrCheckout: false
   }
 }
 
-- 
cgit v1.2.3