Add extra security via validating PR source branch

StrangeRanger · Nov 27, 2024 · 04f4905 · 04f4905
1 parent ad6fc1f
commit 04f4905
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/update-submodule-files.yml b/.github/workflows/update-submodule-files.yml
@@ -22,6 +22,13 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           submodules: true
 
+      - name: Validate PR source branch
+        run: |
+          if [[ ${{ github.event.pull_request.head.repo.full_name }} != '${{ github.repository }}' ]]; then
+            echo "Untrusted repository detected! Exiting.";
+            exit 1;
+          fi
+
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@v6
         with: