You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Treat PRs with agit flow as fork PRs when triggering actions. (#23884)
There is no fork concept in agit flow, anyone with read permission can
push `refs/for/<target-branch>/<topic-branch>` to the repo. So we should
treat it as a fork pull request because it may be from an untrusted
user.
Copy file name to clipboardExpand all lines: models/actions/run.go
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -36,7 +36,7 @@ type ActionRun struct {
36
36
TriggerUser*user_model.User`xorm:"-"`
37
37
Refstring
38
38
CommitSHAstring
39
-
IsForkPullRequestbool
39
+
IsForkPullRequestbool// If this is triggered by a PR from a forked repository or an untrusted user, we need to check if it is approved and limit permissions when running the workflow.
40
40
NeedApprovalbool// may need approval if it's a fork pull request
0 commit comments