fix: PR checkout 的分支和权限问题

Author: clansty

.github/workflows/aquamai.yaml

@@ -5,6 +5,9 @@ on:
   push:
   pull_request_target:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: windows-latest
@@ -17,6 +20,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
 
       - name: Get Git Describe
         run: |