J. Nick Koston 55fc563c69 Checkout base branch to prevent PR author code injection ...

pull_request_review checks out the PR merge commit by default,
which means require() would load the PR author's version of
shared scripts. Explicitly checkout the base branch SHA instead.

2026-03-02 15:50:54 -10:00

..

matchers

Finish up transition from black-format to ruff (#8294)

2025-02-21 13:02:55 -06:00

auto-label-pr.yml

[workflows] Refactor auto-label-pr script into modular JS (#13582)

2026-01-29 09:42:55 +13:00

ci-api-proto.yml

Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#14326)

2026-02-26 21:35:15 -10:00

ci-clang-tidy-hash.yml

Bump actions/setup-python from 6.1.0 to 6.2.0 (#13454)

2026-01-22 11:16:27 -10:00

ci-docker.yml

Bump actions/setup-python from 6.1.0 to 6.2.0 (#13454)

2026-01-22 11:16:27 -10:00

ci-memory-impact-comment.yml

Bump actions/checkout from 6.0.1 to 6.0.2 (#13452)

2026-01-22 11:16:15 -10:00

ci.yml

Bump actions/download-artifact from 7.0.0 to 8.0.0 (#14327)

2026-02-27 14:43:10 -05:00

codeowner-approved-label.yml

Checkout base branch to prevent PR author code injection

2026-03-02 15:50:54 -10:00

codeowner-review-request.yml

[github-actions] Add code-owner-approved label workflow

2026-03-02 15:45:08 -10:00

codeql.yml

Bump github/codeql-action from 4.32.4 to 4.32.5 (#14416)

2026-03-02 11:44:53 -10:00

external-component-bot.yml

Pin SHA for github actions (#10879)

2025-09-25 08:08:16 -05:00

issue-codeowner-notify.yml

Pin SHA for github actions (#10879)

2025-09-25 08:08:16 -05:00

lock.yml

[ci] Lint lock.yml (#9214)

2025-06-26 17:44:02 +12:00

pr-title-check.yml

[ci] Skip PR title check for dependabot PRs (#14418)

2026-03-02 16:49:14 -05:00

release.yml

Bump actions/download-artifact from 7.0.0 to 8.0.0 (#14327)

2026-02-27 14:43:10 -05:00

stale.yml

Bump actions/stale from 10.1.1 to 10.2.0 (#14036)

2026-02-17 13:24:39 -06:00

status-check-labels.yml

[CI] Add auto label for chained PRs (#11457)

2025-10-21 11:22:56 -10:00

sync-device-classes.yml

Bump actions/setup-python from 6.1.0 to 6.2.0 (#13454)

2026-01-22 11:16:27 -10:00