From ca36b4a799b04dcddafc30f85c2e2a0b829d1294 Mon Sep 17 00:00:00 2001
From: Zhang Sheng <zhangsheng@uniontech.com>
Date: Fri, 24 Jul 2026 10:15:37 +0800
Subject: [PATCH] chore: update GitHub actions workflow for cppcheck
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

1. Updated actions/checkout from v4 to v7 for better stability and
features
2. Added allow-unsafe-pr-checkout: true parameter to permit checkouts
from unsafe PRs
3. Maintained existing functionality while improving security and
compatibility

Influence:
1. Verify cppcheck workflow still runs successfully on PR submissions
2. Test with different PR scenarios including unsafe origins
3. Confirm persisted credentials handling remains disabled

chore: 更新GitHub actions的cppcheck工作流程

1. 将actions/checkout从v4升级到v7以获得更好的稳定性和功能
2. 添加allow-unsafe-pr-checkout: true参数以允许从不安全的PR检出
3. 在改进安全性和兼容性的同时保持原有功能

Influence:
1. 验证cppcheck工作流程在PR提交时仍能成功运行
2. 测试包括不安全源在内的不同PR场景
3. 确认持久化凭据处理保持禁用状态
---
 .github/workflows/cppcheck.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cppcheck.yml b/.github/workflows/cppcheck.yml
index f41da53e..85544fae 100644
--- a/.github/workflows/cppcheck.yml
+++ b/.github/workflows/cppcheck.yml
@@ -14,10 +14,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: export
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
+          allow-unsafe-pr-checkout: true
       - uses: linuxdeepin/action-cppcheck@main
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}