Let the clang-tidy comment workflow check out fork pull requests

actions/checkout@v4 now needs allow-unsafe-pr-checkout for fork PR code in workflow_run.
2026-10-21 16:46:18 +00:00 · 2026-10-20 13:36:12 +03:00
parent 5a3b4e50cd
commit 19ef2d1830
1 changed files with 2 additions and 0 deletions
@@ -64,6 +64,8 @@ jobs:
        repository: ${{ env.PR_HEAD_REPO }}
        ref: ${{ env.PR_HEAD_SHA }}
        persist-credentials: false
+        # Only read by the comment action, never built or run.
+        allow-unsafe-pr-checkout: true
    - name: Redownload analysis results
      uses: actions/github-script@v7
      with: