hello-stephen opened a new pull request, #65842:
URL: https://github.com/apache/doris/pull/65842

   ## What changed
   
   - Backport the License Check trigger from `pull_request_target` to 
`pull_request`.
   - Remove the duplicate Code Formatter `pull_request_target` path.
   - Use `actions/checkout@v7` without explicitly checking out fork HEAD code.
   - Restrict workflow permissions to read-only.
   - Backport the hardened incremental license configuration and SkyWalking 
Eyes v0.8.0.
   
   ## Why
   
   GitHub now refuses fork HEAD checkout from `pull_request_target`. PRs 
targeting `branch-4.0` read the workflow from their merge ref, so the 
master-only fix in #65833 does not create a License Check for those PRs.
   
   ## Validation
   
   - Both workflow files match the versions fixed on master by #65833.
   - YAML parsing passed.
   - No `pull_request_target`, old checkout version, or explicit fork HEAD 
checkout remains in these workflows.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to