From 7b3343e739f6ae8b4cae4282f5cecdbfb3993d54 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=ADt=20Ku=C4=8Dera?=
 <26327373+vkucera@users.noreply.github.com>
Date: Wed, 1 Jul 2026 14:23:53 +0200
Subject: [PATCH] Update checkout configuration

checkout@v7 forbids checking out fork pull request code on `pull_request_target` by default.
---
 .github/workflows/mega-linter.yml | 1 +
 .github/workflows/o2-linter.yml   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml
index 6a106a0fc68..edaee8c9344 100644
--- a/.github/workflows/mega-linter.yml
+++ b/.github/workflows/mega-linter.yml
@@ -32,6 +32,7 @@ jobs:
           fetch-depth: 0
           # So we can use secrets.ALIBUILD_GITHUB_TOKEN to push later.
           persist-credentials: false
+          allow-unsafe-pr-checkout: true # needed for pull_request_target
 
       # MegaLinter
       - name: MegaLinter
diff --git a/.github/workflows/o2-linter.yml b/.github/workflows/o2-linter.yml
index 6f920deed24..1af5915fa89 100644
--- a/.github/workflows/o2-linter.yml
+++ b/.github/workflows/o2-linter.yml
@@ -34,6 +34,7 @@ jobs:
         with:
           ref: ${{ env.BRANCH_HEAD }}
           fetch-depth: 0 # needed to get the full history
+          allow-unsafe-pr-checkout: true # needed for pull_request_target
       - name: Run tests
         id: linter
         run: |