Fix lint workflow failing on fork PRs #5094

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

kenyonj merged 4 commits into main from kenyonj/fix-lint-fork-checkout

Mar 30, 2026

Merged

Fix lint workflow failing on fork PRs #5094

Disable bundler cache in fork-facing lint job

GitHub Advanced Security / CodeQL failed Mar 30, 2026 in 4s

3 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

3 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 24 in .github/workflows/lint.yml

Code scanning / CodeQL

Cache Poisoning via execution of untrusted code High

Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code. (

).

Check failure on line 27 in .github/workflows/lint.yml

Code scanning / CodeQL

Cache Poisoning via execution of untrusted code High

Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code. (

).

Check failure on line 31 in .github/workflows/lint.yml

Code scanning / CodeQL

Cache Poisoning via execution of untrusted code High

Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code. (

).