actions/checkout
View on GitHub ↗ ★ 8,991 TypeScript
Action for checking out a repo
21 mentions on Hacker News by 21 people: 8 stories, 13 comments · first 2020-05-02 · latest 2026-04-29
20082026
-
The actions/checkout repo still doesn't even use immutable releases so I'll believe it when I see it https://github.com/actions/checkout/issues/2316
comment by cyberclimb · 2026-04-29 · in GitHub Actions is the weakest link -
…issues - here's one[1] that soon celebrates its sixth birthday, despite having an available PR! [0] https://github.com/actions/checkout#note [1] https://github.com/actions/checkout/issues/270#issue-6289677...
comment by danra · 2026-04-29 · in An update on GitHub availability -
…on their Azure adoption and many core projects are in stasis even from community contributions. https://github.com/actions/checkout#note
comment by roastedfunction · 2026-04-28 · in Ghostty is leaving GitHub -
…it is a git commit hash of the action repo that contains the transpiled/bundled javascript. Like: https://github.com/actions/checkout/tree/11bd71901bbe5b1630c... So I'm pretty sure that for the same commit hash, I'll be executing the same…
comment by derfniw · 2026-03-23 · in GitHub appears to be struggling with measly three nines availability -
…which updates the action to `actions/checkout@70379aad1a8b40919ce8b382d3cd7d0315cde1d0 # v6.0.2`. https://github.com/actions/checkout/commit/70379aad1a8b40919... is not actually in `actions/checkout` but a fork, and it pulls malicious code…
comment by mmsc · 2026-03-20 · in Aquasecurity/Trivy GitHub Repository and Homebrew Cask Compromised (again) -
what with actions/checkout@v4, hows that documented? https://github.com/actions/checkout/issues/567#issuecomment-... GH has a `permissions:` entry and this mechanism already for internal repo action sharing. And thousands of our dollars…
comment by Already__Taken · 2025-06-15 · in Bypassing GitHub Actions policies in the dumbest way possible -
▲ 1
GitHub's checkout action is halting contributionsstory by bhupesh · 2025-06-07 · 0 comments
-
Here is an example in the wild: https://github.com/actions/checkout/actions/workflows/publis...
comment by esafak · 2025-05-08 · in How to harden GitHub Actions -
…exactly this here, with the v4 and v4.2.2 tags matching here (as of today, v4 will move in future) https://github.com/actions/checkout/tags
comment by donatj · 2025-03-25 · in Whose code am I running in GitHub Actions? -
…If this resonates with you please go and give it a thumbs up :) [1]: https://github.com/actions/checkout?tab=readme-ov-file#usage [2]: https://docs.github.com/en/actions/security-for-github-actio...
comment by onnimonni · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…something from README of the action. Let's have a look at a random official GH provided action: https://github.com/actions/checkout It lists the following snippet: `uses: actions/checkout@v4` Almost everyone will just copy paste this…
comment by jakub_g · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
▲ 4
Tell HN: GitHub doesn't cleanup spam in their own reposstory by latexr · 2025-01-03 · 0 comments
-
…in some general ini file? (or into a source file for that matter)? Sometimes it's not "you": https://github.com/actions/checkout/issues/485
comment by lloeki · 2024-09-09 · in Exploiting CI / CD Pipelines for fun and profit -
▲ 2
Checkout v3 using node20 instead of node16story by josephcsible · 2024-07-11 · 0 comments
-
▲ 3
Tell HN: PR GitHub Actions don't run over your commit by defaultstory by filipesilva · 2023-10-19 · 0 comments
-
…broke when they released “checkout@v4” Yes, they broke the ability for GitHub CI to checkout repos… https://github.com/actions/checkout/issues/1448
comment by Arbortheus · 2023-09-05 · in GitHub was down -
▲ 3
Can't use 'tar -xzf' extract archive filestory by caioariede · 2023-09-04 · 0 comments
-
▲ 2
Git v2.35.2 breaks actions/checkout in containersstory by database64128 · 2022-04-13 · 0 comments
-
▲ 3
GitHub Actions Stopped Workingstory by kamyarg · 2020-11-27 · 0 comments
-
▲ 1
GitHub Actions checking out wrong commitstory by blackRust · 2020-07-24 · 0 comments
-
…GitHub. Edit: I stand somewhat corrected, seems most CI systems actually test the merged code - https://github.com/actions/checkout/issues/15#issuecomment-5... which I presume includes manually merged scenarios also. That said, they don’t…
comment by lstamour · 2020-05-02 · in Complexity Has to Live Somewhere