From 63edee32b344a069fcbcc353a7fc33559dcc02d6 Mon Sep 17 00:00:00 2001 From: "David S. Batista" Date: Mon, 22 Jun 2026 15:17:32 +0200 Subject: [PATCH] adding allow-unsafe-pr-checkout: true to CI_docstring_labeler.yml --- .github/workflows/CI_docstring_labeler.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/CI_docstring_labeler.yml b/.github/workflows/CI_docstring_labeler.yml index 5645573514..f99852438b 100644 --- a/.github/workflows/CI_docstring_labeler.yml +++ b/.github/workflows/CI_docstring_labeler.yml @@ -38,6 +38,9 @@ jobs: ref: ${{ github.event.pull_request.head.ref }} # This must be set to correctly checkout a fork repository: ${{ github.event.pull_request.head.repo.full_name }} + # Safe because the script is copied from the trusted base before this checkout; + # fork files are only read as data, never executed. + allow-unsafe-pr-checkout: true - name: Get docstrings id: head-docstrings