Merge pull request #2532 from Ludy87/fix_Dangerous_Workflow_4

[Security] Dangerous-Workflow
Stirling-Tools · Dec 21, 2024 · 76924cc · 76924cc
2 parents 46261c5 + 12e8ace
commit 76924cc
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/check_properties.yml b/.github/workflows/check_properties.yml
@@ -31,9 +31,11 @@ jobs:
 
       - name: Checkout PR branch
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        env:
+          PULL_REQUEST_REF: ${{ github.event.pull_request.head.ref }}
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
-          ref: "${{ github.event.pull_request.merge_commit_sha }}"
+          ref: $PULL_REQUEST_REF
           path: pr-branch
           fetch-depth: 0