chore: checkout PR SHA as part of running govulncheck (#2177)

GoogleCloudPlatform · Apr 9, 2024 · 088f47a · 088f47a
1 parent 4317743
commit 088f47a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
@@ -38,5 +38,13 @@ jobs:
         with:
           go-version: "1.22"
           check-latest: true
+      - name: Checkout code
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
       - id: govulncheck
         uses: golang/govulncheck-action@3a32958c2706f7048305d5a2e53633d7e37e97d0 # v1
+        with:
+          # Let actions/checkout above check-out the correct SHA
+          repo-checkout: false