Repository navigation

Fetch the pull request's head in the engine, so a calling workflow needs no checkout of untrusted code - #19

Merged

polewskm merged 4 commits into

mainfrom

fetch-head-in-engine

Oct 31, 2026

Merged

Fetch the pull request's head in the engine, so a calling workflow needs no checkout of untrusted code#19
polewskm merged 4 commits into
mainfrom
fetch-head-in-engine

Commits on Oct 30, 2026
- Fetch the pull request's head in the engine, so a calling workflow needs no checkout of untrusted code
  polewskm
  committed
  600f7ec
- Document that the engine fetches the head
  polewskm
  committed
  1c4b602
Commits on Oct 31, 2026
- Check an existing checkout's commit, report a moved head, clean up, and test the fetch's inputs
  polewskm
  committed
  0848176
- Enforce the fork exclusion in the engine, keep git's message, and test the token reaching the remote
  polewskm
  committed
  1516681