actions/checkout
View on GitHub ↗ ★ 8,991 TypeScript
Action for checking out a repo
21 mentions on Hacker News by 21 people: 8 stories, 13 comments · first 2020-05-02 · latest 2026-04-29
20082026
-
The actions/checkout repo still doesn't even use immutable releases so I'll believe it when I see it https://github.com/actions/checkout/issues/2316
comment by cyberclimb · 2026-04-29 · in GitHub Actions is the weakest link -
…issues - here's one[1] that soon celebrates its sixth birthday, despite having an available PR! [0] https://github.com/actions/checkout#note [1] https://github.com/actions/checkout/issues/270#issue-6289677...
comment by danra · 2026-04-29 · in An update on GitHub availability -
…on their Azure adoption and many core projects are in stasis even from community contributions. https://github.com/actions/checkout#note
comment by roastedfunction · 2026-04-28 · in Ghostty is leaving GitHub -
…it is a git commit hash of the action repo that contains the transpiled/bundled javascript. Like: https://github.com/actions/checkout/tree/11bd71901bbe5b1630c... So I'm pretty sure that for the same commit hash, I'll be executing the same…
comment by derfniw · 2026-03-23 · in GitHub appears to be struggling with measly three nines availability -
…which updates the action to `actions/checkout@70379aad1a8b40919ce8b382d3cd7d0315cde1d0 # v6.0.2`. https://github.com/actions/checkout/commit/70379aad1a8b40919... is not actually in `actions/checkout` but a fork, and it pulls malicious code…
comment by mmsc · 2026-03-20 · in Aquasecurity/Trivy GitHub Repository and Homebrew Cask Compromised (again) -
what with actions/checkout@v4, hows that documented? https://github.com/actions/checkout/issues/567#issuecomment-... GH has a `permissions:` entry and this mechanism already for internal repo action sharing. And thousands of our dollars…
comment by Already__Taken · 2025-06-15 · in Bypassing GitHub Actions policies in the dumbest way possible -
Here is an example in the wild: https://github.com/actions/checkout/actions/workflows/publis...
comment by esafak · 2025-05-08 · in How to harden GitHub Actions -
…exactly this here, with the v4 and v4.2.2 tags matching here (as of today, v4 will move in future) https://github.com/actions/checkout/tags
comment by donatj · 2025-03-25 · in Whose code am I running in GitHub Actions? -
…If this resonates with you please go and give it a thumbs up :) [1]: https://github.com/actions/checkout?tab=readme-ov-file#usage [2]: https://docs.github.com/en/actions/security-for-github-actio...
comment by onnimonni · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…something from README of the action. Let's have a look at a random official GH provided action: https://github.com/actions/checkout It lists the following snippet: `uses: actions/checkout@v4` Almost everyone will just copy paste this…
comment by jakub_g · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…in some general ini file? (or into a source file for that matter)? Sometimes it's not "you": https://github.com/actions/checkout/issues/485
comment by lloeki · 2024-09-09 · in Exploiting CI / CD Pipelines for fun and profit -
…broke when they released “checkout@v4” Yes, they broke the ability for GitHub CI to checkout repos… https://github.com/actions/checkout/issues/1448
comment by Arbortheus · 2023-09-05 · in GitHub was down -
…GitHub. Edit: I stand somewhat corrected, seems most CI systems actually test the merged code - https://github.com/actions/checkout/issues/15#issuecomment-5... which I presume includes manually merged scenarios also. That said, they don’t…
comment by lstamour · 2020-05-02 · in Complexity Has to Live Somewhere