Merge origin/main into aiqiaoy/update-error

update error message to make sure there is no comma directly after the url
2026-08-16 09:40:53 +00:00 · 2026-06-17 16:01:11 +00:00 · 2026-06-16 16:41:36 +00:00
2 changed files with 21140 additions and 26258 deletions
@@ -75,9 +75,9 @@ export function assertSafePrCheckout(input: IUnsafePrCheckoutInput): void {
    `Refusing to check out fork pull request code from a '${eventName}' workflow. ` +
      `This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch ` +
      `cache scope, and runner access. Fetching and executing a fork's code in that trusted ` +
-      `context commonly leads to "pwn request" vulnerabilities. To opt in after reviewing ` +
+      `context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks ` +
-      `the risks at https://gh.io/securely-using-pull_request_target, set ` +
+      `at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' ` +
-      `'allow-unsafe-pr-checkout: true' on the actions/checkout step.`
+      `on the actions/checkout step.`
  )
 }
Author	SHA1	Message	Date
copilot-swe-agent[bot]andGitHub	29092a1639	Merge origin/main into aiqiaoy/update-error	2026-06-17 16:01:11 +00:00
Aiqiao Yan	6363c09e83	update error message to make sure there is no comma directly after the url	2026-06-16 16:41:36 +00:00