[pkl.impl.ghactions] Fix potential issues with hawkeye checking (#64)

Author: HT154

.github/PklProject.deps.json

@@ -10,7 +10,7 @@
     },
     "package://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1": {
       "type": "local",
-      "uri": "projectpackage://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.3.3",
+      "uri": "projectpackage://pkg.pkl-lang.org/pkl-project-commons/pkl.impl.ghactions@1.3.4",
       "path": "../packages/pkl.impl.ghactions"
     },
     "package://pkg.pkl-lang.org/pkl-pantry/pkl.experimental.deepToTyped@1": {

packages/pkl.impl.ghactions/PklProject

@@ -17,7 +17,7 @@
 amends "../basePklProject.pkl"
 
 package {
-  version = "1.3.3"
+  version = "1.3.4"
 }
 
 dependencies {

packages/pkl.impl.ghactions/jobs/HawkeyeCheck.pkl

@@ -1,5 +1,5 @@
 //===----------------------------------------------------------------------===//
-// Copyright © 2025 Apple Inc. and the Pkl project authors. All rights reserved.
+// Copyright © 2025-2026 Apple Inc. and the Pkl project authors. All rights reserved.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -19,8 +19,9 @@ extends "PklJob.pkl"
 
 import "@com.github.actions/catalog.pkl"
 
+// v6.4.1
 image: String =
-  "ghcr.io/korandoru/hawkeye@sha256:c3ab994c0d81f3d116aabf9afc534e18648e3e90d7525d741c1e99dd8166ec85"
+  "ghcr.io/korandoru/hawkeye@sha256:e0abf8dbfaeeeba1249679d662d9fb404b1dcdb041c6093ea1f7a6edb7d89319"
 
 configPath: String = "licenserc.toml"
 
@@ -37,10 +38,17 @@ fixed job {
   steps {
     (catalog.`actions/checkout@v6`) {
       with {
-        // required to result git attrs
+        // required to set git attrs
         `fetch-depth` = 0
+        // used the PR HEAD if runnning on a PR
+        ref =
+          "${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}"
       }
     }
+    // force git to behave in the container
+    // the checkout action allegedly does this
+    // but this has been required for hawkeye in some cases
+    new { run = "git config --global --add safe.directory $(pwd)" }
     new {
       run =
         new Listing {

packages/pkl.impl.ghactions/tests/examples.pkl-expected.pcf

@@ -167,10 +167,12 @@ examples {
         steps:
         - uses: actions/checkout@v6
           with:
+            ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
             fetch-depth: 0
+        - run: git config --global --add safe.directory $(pwd)
         - run: hawkeye check --config licenserc.toml --fail-if-unknown
         container:
-          image: ghcr.io/korandoru/hawkeye@sha256:c3ab994c0d81f3d116aabf9afc534e18648e3e90d7525d741c1e99dd8166ec85
+          image: ghcr.io/korandoru/hawkeye@sha256:e0abf8dbfaeeeba1249679d662d9fb404b1dcdb041c6093ea1f7a6edb7d89319
 
     """
   }