Skip to content

fix: add advanced codeql configuration that triggers for pull request from forks#53

Merged
fabianburth merged 4 commits intomainfrom
feat/advanced-codeql
Mar 2, 2026
Merged

fix: add advanced codeql configuration that triggers for pull request from forks#53
fabianburth merged 4 commits intomainfrom
feat/advanced-codeql

Conversation

@fabianburth
Copy link
Contributor

What this PR does / why we need it

Which issue(s) this PR fixes

…s from forks

Signed-off-by: Fabian Burth <fabian.burth@sap.com>
Comment on lines +47 to +53
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
repository: ${{ env.REPO }}
ref: ${{ env.REF }}

- name: Initialize CodeQL

Check failure

Code scanning / CodeQL

Checkout of untrusted code in trusted context

Potential execution of untrusted code on a privileged workflow ([pull_request_target](1))
Signed-off-by: Fabian Burth <fabian.burth@sap.com>
Signed-off-by: Fabian Burth <fabian.burth@sap.com>
Signed-off-by: Fabian Burth <fabian.burth@sap.com>
@fabianburth fabianburth merged commit 8aade18 into main Mar 2, 2026
15 checks passed
@fabianburth fabianburth deleted the feat/advanced-codeql branch March 2, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants