This is an automated email from the ASF dual-hosted git repository.
ramanathan1504 pushed a commit to branch gha/v0
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
The following commit(s) were added to refs/heads/gha/v0 by this push:
new 4972f28 chore: add explanatory comment for allow-unsafe-pr-checkout
(#492)
4972f28 is described below
commit 4972f280911aedcfbd91ed2ad9d18af1fdb3bdc2
Author: Ramanathan <[email protected]>
AuthorDate: Wed Jul 22 00:14:12 2026 +0530
chore: add explanatory comment for allow-unsafe-pr-checkout (#492)
* add explanatory comment for allow-unsafe-pr-checkout
* Update .github/workflows/process-dependabot-reusable.yaml
Co-authored-by: Piotr P. Karwasz <[email protected]>
---------
Co-authored-by: Piotr P. Karwasz <[email protected]>
---
.github/workflows/process-dependabot-reusable.yaml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/workflows/process-dependabot-reusable.yaml
b/.github/workflows/process-dependabot-reusable.yaml
index cc41d7b..5de0638 100644
--- a/.github/workflows/process-dependabot-reusable.yaml
+++ b/.github/workflows/process-dependabot-reusable.yaml
@@ -79,6 +79,8 @@ jobs:
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
with:
ref: ${{ steps.pr.outputs.head-ref }}
+ # An action triggered by `workflow_run` has access to secrets.
+ # Checking out untrusted code requires an explicit opt-in.
allow-unsafe-pr-checkout: true
- name: Create changelog entries
