Workflow sec fix (#120)

* fix security issue https://github.com/XinFinOrg/XDC-CSC/security/code-scanning/1

Author: wanwiset25

.github/workflows/pr_deploy.yaml

@@ -6,7 +6,9 @@ on:
 
 jobs:
   build_and_deploy:
-    if: startsWith(github.head_ref, 'feature') ||  startsWith(github.head_ref, 'fix')
+    if: |
+      ( startsWith(github.head_ref, 'feature') ||  
+        startsWith(github.head_ref, 'fix') ) 
     name: Deploy on PR 
     runs-on: ubuntu-latest
     steps:
@@ -15,8 +17,10 @@ jobs:
 
       - name: check out trigger branch
         run: |
-          git fetch origin ${{ github.head_ref }}
-          git checkout ${{ github.head_ref }}
+          git fetch origin $BRANCH
+          git checkout $BRANCH
+        env:
+          BRANCH: ${{ github.head_ref }}
 
       # - name: check envs
       #   run: | 

.github/workflows/pr_test.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   test_on_pr:
-    name: Test on PR
+    name: Run tests on PR
     runs-on: ubuntu-latest
     env:
       GOPATH: ${{ github.workspace }}