Merge a1e581c8e8 into 9ace79a4d2

.github/workflows/validate-external.yml

@@ -1,7 +1,9 @@
 name: validate-external
 on:
   pull_request_target:
-    types: [opened, synchronize]
+    branches:
+      - main
+    types: [edited, opened, synchronize]
 jobs:
   authorize:
     if: github.repository != github.event.pull_request.head.repo.full_name
@@ -18,3 +20,8 @@ jobs:
     secrets:
       ASSET_REPO: ${{ secrets.ASSET_REPO }}
       ASSET_REPO_TOKEN: ${{ secrets.ASSET_REPO_TOKEN }}
+    steps:
+      - name: Checkout PR branch
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}

.github/workflows/validate-internal.yml

@@ -4,9 +4,16 @@ on:
     branches:
       - main
   pull_request:
-    types: [opened, synchronize]
+    branches:
+      - main
+    types: [edited, opened, synchronize]
 jobs:
   build:
     if: github.event_name == 'push' || github.repository == github.event.pull_request.head.repo.full_name
     uses: ./.github/workflows/validate.yml
     secrets: inherit
+    steps:
+      - name: Checkout PR branch
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}

.github/workflows/validate.yml

@@ -26,6 +26,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: recursive
+          ref: ${{ github.event.pull_request.head.ref }}
 
       - name: Checkout Private Repository
         uses: actions/checkout@v4
@@ -92,6 +93,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: recursive
+          ref: ${{ github.event.pull_request.head.ref }}
 
       - name: Checkout private repository
         uses: actions/checkout@v4
@@ -170,6 +172,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: recursive
+          ref: ${{ github.event.pull_request.head.ref }}
 
       - name: Checkout Private Repository
         uses: actions/checkout@v4