From 6dc2f24a5eafd5ffc57294efb1c6fef64ad8537d Mon Sep 17 00:00:00 2001
From: Simon Marty <simon.marty@protonmail.com>
Date: Tue, 28 Jul 2026 14:38:33 -0700
Subject: [PATCH] Allow unsafe PR checkout on the integ and code review
 workflows.

---
 .github/workflows/build-test-image.yml | 1 +
 .github/workflows/code-review.yml      | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/build-test-image.yml b/.github/workflows/build-test-image.yml
index 944d9f7a..c1cf67a3 100644
--- a/.github/workflows/build-test-image.yml
+++ b/.github/workflows/build-test-image.yml
@@ -41,6 +41,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
         with:
+          allow-unsafe-pr-checkout: true
           ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}
 
       - name: Login to GitHub Container Registry
diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml
index 4ffaae8b..2d8b53a3 100644
--- a/.github/workflows/code-review.yml
+++ b/.github/workflows/code-review.yml
@@ -19,6 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
         with:
+          allow-unsafe-pr-checkout: true
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 1