ci: add allow-unsafe-pr-checkout option to checkout steps - #228
Conversation
Add allow-unsafe-pr-checkout: true to both source and dest repository checkout steps in synchronize workflow. 在同步工作流的源仓库和目标仓库 checkout 步骤中添加 allow-unsafe-pr-checkout: true 配置项。 Log: 同步工作流checkout步骤添加unsafe-pr-checkout选项 Influence: 允许在PR事件触发时安全检出仓库,确保同步流程正常运行。
Reviewer's guide (collapsed on small PRs)Reviewer's GuideThe synchronization workflow now passes allow-unsafe-pr-checkout: true to both source and destination checkout actions, allowing repository checkout to proceed correctly when the workflow is triggered by pull request events. Sequence diagram for PR-triggered repository synchronizationsequenceDiagram
participant Workflow as SynchronizeWorkflow
participant SourceRepo as SourceRepository
participant DestRepo as DestinationRepository
Workflow->>SourceRepo: actions/checkout@v3 allow-unsafe-pr-checkout: true
SourceRepo-->>Workflow: Source checkout
Workflow->>DestRepo: actions/checkout@v3 allow-unsafe-pr-checkout: true
DestRepo-->>Workflow: Destination checkout
Workflow->>Workflow: rsync
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Hey - I've found 1 issue
Prompt for AI Agents
Please address the comments from this code review:
## Individual Comments
### Comment 1
<location path=".github/workflows/synchronize-to-dtk6.yml" line_range="36" />
<code_context>
path: 'source'
repository: ${{ inputs.source_repo }}
fetch-depth: 0
+ allow-unsafe-pr-checkout: true
- name: Checkout dest repository ${{ inputs.dest_repo }}
</code_context>
<issue_to_address>
**issue (bug_risk):** `actions/checkout@v3` does not define an `allow-unsafe-pr-checkout` input, so the runner ignores these settings and only emits an unexpected-input warning; the workflow therefore does not gain the PR checkout behavior described in the change.
**Triggers:** When the synchronization workflow depends on this option to checkout a pull-request ref.
**Suggested fix:** Use an actions/checkout version and configuration that explicitly supports the required PR checkout behavior, or remove this unsupported input and implement the supported equivalent.
</issue_to_address>Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
| path: 'source' | ||
| repository: ${{ inputs.source_repo }} | ||
| fetch-depth: 0 | ||
| allow-unsafe-pr-checkout: true |
There was a problem hiding this comment.
issue (bug_risk): actions/checkout@v3 does not define an allow-unsafe-pr-checkout input, so the runner ignores these settings and only emits an unexpected-input warning; the workflow therefore does not gain the PR checkout behavior described in the change.
Triggers: When the synchronization workflow depends on this option to checkout a pull-request ref.
Suggested fix: Use an actions/checkout version and configuration that explicitly supports the required PR checkout behavior, or remove this unsupported input and implement the supported equivalent.
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: 18202781743 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Add allow-unsafe-pr-checkout: true to both source and dest repository
checkout steps in synchronize workflow.
在同步工作流的源仓库和目标仓库 checkout 步骤中添加
allow-unsafe-pr-checkout: true 配置项。
Log: 同步工作流checkout步骤添加unsafe-pr-checkout选项
Influence: 允许在PR事件触发时安全检出仓库,确保同步流程正常运行。
Summary by Sourcery
Enable pull request checkout support in the synchronization workflow for both source and destination repositories.
Enhancements:
CI: