GitHub Actions Checkout v7: Fixing the Pwn Request Vulnerability Before July 16 If your CI pipeline uses pull_request_target and checks out the pull request's head commit, actions/checkout@v7 will now refuse to do it. That's not a bug — it's GitHub closing one of the most common CI/CD attack patterns in the ecosystem, …