Branch: refs/heads/misc-fix-fork-quality-workflow Home: https://github.com/xwiki/.github Commit: c11c91d11470dd6a7310f2722dd3e0ffc959e35b https://github.com/xwiki/.github/commit/c11c91d11470dd6a7310f2722dd3e0ffc959... Author: Vincent Massol <[email protected]> Date: 2026-09-09 (Wed, 09 Sep 2026) Changed paths: M .github/workflows/quality-pr.yml Log Message: ----------- [Misc] Let the quality checks of a fork pull request actually run * Set allow-unsafe-pr-checkout on the checkout step. actions/checkout refuses to check out the head of a fork pull request from a pull_request_target workflow unless the workflow opts in, so the job quality-pr-sonar.yml calls died at its first step. That trigger exists precisely to build a fork's own code with SONAR_TOKEN, and who is allowed to reach it is the caller's guard on author_association, so the opt-in states a decision that was already made. * Set cache-read-only on the setup-java step for pull_request_target runs. Such a run is for the base branch, so any cache it saved would land in the scope master and every other pull request restore from, holding a repository filled by building the pull request's own code. Restoring stays on, so those runs keep a warm repository. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/.github/settings/notifications