actions/checkout
0
0
Fork 0
mirror of https://github.com/actions/checkout.git synced 2025-11-28 01:51:57 +02:00
Code Activity

Merge d1d381abe7 into c2d88d3ecc

Browse source
This commit is contained in:
Xavier Solé Nogués 2025-11-24 13:56:38 +01:00 • committed by GitHub
commit c579c401c2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
dist/index.js vendored
View file

@ -1973,7 +1973,8 @@ function getInputs() {
// Repository path
result.repositoryPath = core.getInput('path') || '.';
result.repositoryPath = path.resolve(githubWorkspacePath, result.repositoryPath);
if (!(result.repositoryPath + path.sep).startsWith(githubWorkspacePath + path.sep)) {
if (!core.getInput('allow-path-outside-workspace') &&
!(result.repositoryPath + path.sep).startsWith(githubWorkspacePath + path.sep)) {
throw new Error(`Repository path '${result.repositoryPath}' is not under '${githubWorkspacePath}'`);
}
// Workflow repository?