[Security] Dangerous-Workflow

https://github.com/Ludy87/test_java/security/code-scanning/26
Stirling-Tools · Dec 21, 2024 · 12e8ace · 12e8ace
1 parent 46261c5
commit 12e8ace
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/check_properties.yml b/.github/workflows/check_properties.yml
@@ -31,9 +31,11 @@ jobs:
 
       - name: Checkout PR branch
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        env:
+          PULL_REQUEST_REF: ${{ github.event.pull_request.head.ref }}
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
-          ref: "${{ github.event.pull_request.merge_commit_sha }}"
+          ref: $PULL_REQUEST_REF
           path: pr-branch
           fetch-depth: 0