Merge remote-tracking branch 'sgarg00/github-actions-ci' into develop

ci: fix pull_request_target fork checkout error and Node 20 deprecation
warning (#324)

Fixes:
- The Jenkins dispatch workflow failed on fork PRs with
  Error: Refusing to check out fork pull request code from a
  'pull_request_target' workflow. This workflow runs with the base
  repository's GITHUB_TOKEN, secrets, default-branch cache scope, and
  runner access. Fetching and executing a fork's code in that trusted
  context commonly leads to "pwn request" vulnerabilities. To opt in,
  review the risks at https://gh.io/securely-using-pull_request_target
  and set 'allow-unsafe-pr-checkout: true' on the actions/checkout step.
- Node 20 warnings on GitHub Actions

Related commit: 8e30ec80 ("ci: migrate Jenkins dispatch to
pull_request_target")

See the commit message for more details
Reviewed-by: default avatarRobert Schmidt <robert.schmidt@openairinterface.org>
Reviewed-by: default avatarJaroslava Fiedlerova <jaroslava.fiedlerova@openairinterface.org>
parents 31ffb21a 97ad3111
......@@ -88,11 +88,11 @@ jobs:
protected_files_changed: ${{ steps.filter.outputs.protected }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v7
with:
fetch-depth: 0
- name: Check changed files
uses: dorny/paths-filter@v3
uses: dorny/paths-filter@v4
id: filter
with:
filters: |
......@@ -136,10 +136,6 @@ jobs:
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v4
with:
ref: ${{ github.event.pull_request.head.sha || github.ref }}
- name: Trigger Jenkins
run: |
# Write payload to a temp file to avoid shell escaping issues
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment