From a239ebbb060b6d651c9d6d4896ab7c77ace75541 Mon Sep 17 00:00:00 2001
From: Neko Ayaka <neko@ayaka.moe>
Date: Tue, 4 Aug 2026 18:08:29 +0800
Subject: [PATCH] chore(ci): set allow-unsafe-pr-checkout for PR deploy

---
 .github/workflows/deploy-cloudflare-workers-preview-deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/deploy-cloudflare-workers-preview-deploy.yml b/.github/workflows/deploy-cloudflare-workers-preview-deploy.yml
index f747a971d..abb0a13c0 100644
--- a/.github/workflows/deploy-cloudflare-workers-preview-deploy.yml
+++ b/.github/workflows/deploy-cloudflare-workers-preview-deploy.yml
@@ -143,6 +143,8 @@ jobs:
           ref: ${{ steps.meta.outputs.HEAD_SHA }}
           fetch-depth: 1
           persist-credentials: false
+          # https://gh.io/securely-using-pull_request_target
+          allow-unsafe-pr-checkout: true
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4