Verify Change Log action failing

Alan Woodward <[email protected]> Fri, 3 Jul 2026 09:08:22 +0100
Newsgroups gmane.comp.jakarta.lucene.devel
Message-ID <[email protected]>
Hi all,

Our Verify Change Log action in GitHub is failing on every PR now with a =
permissions error:

"Error: Refusing to check out fork pull request code from a =
'pull_request_target' workflow. This workflow runs with the base =
repository's GITHUB_TOKEN, secrets, default-branch cache scope, and =
runner access. Fetching and executing a fork's code in that trusted =
context commonly leads to "pwn request" vulnerabilities. To opt in, =
review the risks at https://gh.io/securely-using-pull_request_target and =
set 'allow-unsafe-pr-checkout: true' on the actions/checkout step.=E2=80=9D=


I don=E2=80=99t know enough about how actions work to know if changing =
`allow-unsafe-pr-checkout` is the right solution here, or if we need to =
change the access for this action somehow?

- Alan=