Merge remote-tracking branch 'sgarg00/github-actions-ci' into develop
ci: fix pull_request_target fork checkout error and Node 20 deprecation warning (#324) Fixes: - The Jenkins dispatch workflow failed on fork PRs with Error: Refusing to check out fork pull request code from a 'pull_request_target' workflow. This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch cache scope, and runner access. Fetching and executing a fork's code in that trusted context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' on the actions/checkout step. - Node 20 warnings on GitHub Actions Related commit: 8e30ec80 ("ci: migrate Jenkins dispatch to pull_request_target") See the commit message for more details Reviewed-by:Robert Schmidt <robert.schmidt@openairinterface.org> Reviewed-by:
Jaroslava Fiedlerova <jaroslava.fiedlerova@openairinterface.org>
Showing
Please register or sign in to comment