backport allow-unsafe-pr-checkout to v6 (#2500)

* block checking out fork pr for pull_request_target and workflow_run (#2454)

* block checking out fork pr for some events

* address copilot and reviewer feedback

* run prettier formatting

* build

* update urls

* update readme

* update description and url again

* edit url one more time

* update error wording (#2467)
This commit is contained in:
Aiqiao Yan 2026-07-07 16:34:58 -04:00 committed by GitHub
commit f93ca50bde
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 509 additions and 2 deletions

View file

@ -292,7 +292,7 @@ export async function checkCommitInfo(
}
}
function fromPayload(path: string): any {
export function fromPayload(path: string): any {
return select(github.context.payload, path)
}