Skip to content

ci(claude): read a fork PR's head as git objects instead of checking it out - #890

Merged
superuser404notfound merged 1 commit into
mainfrom
ci/claude-pr-ref
Oct 26, 2026
Merged

superuser404notfound merged 1 commit into
mainfrom
ci/claude-pr-ref

Conversation

@superuser404notfound

Copy link
Copy Markdown
Owner

actions/checkout v7 refused the fork head under pull_request_target on the first live run (#879). The head is now fetched as refs/remotes/pr/head and read with git show / git ls-tree; no fork file lands in the working tree. Fetch tested locally against #879.

🤖 Generated with Claude Code

https://claude.ai/code/session_01WJcXkGQrMiBPixVEFTSBJS

…it out

actions/checkout v7 refuses a fork's head under pull_request_target (first
live run on #879). Rather than opting out of that guard, the head is now only
fetched as refs/remotes/pr/head and read with git show / git ls-tree, so no
fork file ever lands in the working tree.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WJcXkGQrMiBPixVEFTSBJS
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant