chore(ci): set allow-unsafe-pr-checkout for PR deploy

2026-08-04 18:08:55 +08:00
parent 5f0076e3d4
commit a239ebbb06
1 changed files with 2 additions and 0 deletions
@@ -143,6 +143,8 @@ jobs:
          ref: ${{ steps.meta.outputs.HEAD_SHA }}
          fetch-depth: 1
          persist-credentials: false
+          # https://gh.io/securely-using-pull_request_target
+          allow-unsafe-pr-checkout: true

      - name: Setup pnpm
        uses: pnpm/action-setup@v4