From ced100813c147e2fc3ca692ddc52876ed2358c51 Mon Sep 17 00:00:00 2001
From: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:34:16 -0400
Subject: backport `allow-unsafe-pr-checkout` to v2 (#2504)

* block checking out fork pr for pull_request_target and workflow_run (#2454)

* block checking out fork pr for some events

* address copilot and reviewer feedback

* run prettier formatting

* build

* update urls

* update readme

* update description and url again

* edit url one more time

* update error wording (#2467)

* bump upload-artifact

* rebuild
---
 src/git-source-settings.ts | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src/git-source-settings.ts')

diff --git a/src/git-source-settings.ts b/src/git-source-settings.ts
index 6fa3960..82eb983 100644
--- a/src/git-source-settings.ts
+++ b/src/git-source-settings.ts
@@ -83,4 +83,10 @@ export interface IGitSourceSettings {
    * Indicates whether to add repositoryPath as safe.directory in git global config
    */
   setSafeDirectory: boolean
+
+  /**
+   * Opt-in to allow checking out fork pull request code from a workflow
+   * triggered by pull_request_target or workflow_run.
+   */
+  allowUnsafePrCheckout: boolean
 }
-- 
cgit v1.2.3