fix: fetch PR head SHA after shallow clone in CI

Shallow clone only includes default-branch history; pull_request runs must fetch the event commit before checkout.
2026-07-12 12:54:04 +01:00
parent 1e5854ee0a
commit 1cc2b9a8f2
1 changed files with 2 additions and 0 deletions
@@ -25,6 +25,7 @@ jobs:
      - name: Checkout
        run: |
          git clone --depth=50 https://${{ gitea.actor }}:${{ gitea.token }}@git.produktor.io/${{ gitea.repository }}.git .
+          git fetch --depth=1 origin ${{ gitea.sha }}
          git checkout ${{ gitea.sha }}

      - name: Install dependencies
@@ -62,6 +63,7 @@ jobs:
      - name: Checkout
        run: |
          git clone --depth=1 https://${{ gitea.actor }}:${{ gitea.token }}@git.produktor.io/${{ gitea.repository }}.git .
+          git fetch --depth=1 origin ${{ gitea.sha }}
          git checkout ${{ gitea.sha }}

      - name: Install Trivy