J. Nick Koston 55fc563c69 Checkout base branch to prevent PR author code injection ...

pull_request_review checks out the PR merge commit by default,
which means require() would load the PR author's version of
shared scripts. Explicitly checkout the base branch SHA instead.

2026-03-02 15:50:54 -10:00

..

actions

Bump docker/build-push-action from 6.19.1 to 6.19.2 in /.github/actions/build-image (#13965)

2026-02-12 14:31:43 -06:00

ISSUE_TEMPLATE

[repo] Fix issue template config.yml (#9516)

2025-07-15 22:13:18 +12:00

scripts

[github-actions] Add code-owner-approved label workflow

2026-03-02 15:45:08 -10:00

workflows

Checkout base branch to prevent PR author code injection

2026-03-02 15:50:54 -10:00

copilot-instructions.md

Add some AI instructions (#9606)

2025-07-17 22:40:28 +12:00

dependabot.yml

[dependabot] Use specific labels for github-actions updates (#9586)

2025-07-17 15:19:34 +12:00

PULL_REQUEST_TEMPLATE.md

[ci] Add undocumented C++ API change checkbox and auto-label (#14317)

2026-02-26 08:02:52 -10:00