Actions/checkout
0
Fork 0
mirror of https://github.com/actions/checkout.git synced 2025-10-31 19:33:35 +00:00
Code

Merge f16eddee8410930a20309c41063631c4177643a5 into 8edcb1bdb4e267140fa742c62e395cd74f332709

Browse Source
This commit is contained in:
ylemkimon 2025-08-08 15:46:47 -04:00 committed by GitHub
commit 813c3944a5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
README.md
View File

@ -160,6 +160,7 @@ Please refer to the [release page](https://github.com/actions/checkout/releases/
- [Checkout multiple repos (private)](#Checkout-multiple-repos-private)
- [Checkout pull request HEAD commit instead of merge commit](#Checkout-pull-request-HEAD-commit-instead-of-merge-commit)
- [Checkout pull request on closed event](#Checkout-pull-request-on-closed-event)
- [Checkout pull request on `pull_request_target`](#Checkout-pull-request-on-pull_request_target)
- [Push a commit using the built-in token](#Push-a-commit-using-the-built-in-token)
- [Push a commit to a PR using the built-in token](#Push-a-commit-to-a-PR-using-the-built-in-token)
@ -287,6 +288,22 @@ jobs:
- uses: actions/checkout@v4
```
## Checkout pull request on `pull_request_target`
```yaml
on:
- pull_request_target
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
ref: refs/pull/${{ github.event.pull_request.number }}/merge
```
**WARNING! NEVER** run code from pull requests of public repositories! The token of `pull_request_target` event has write access.
## Push a commit using the built-in token
```yaml