Skip to content
Check Submodule Pins

feat(arbnode): add opt-in stalled execution timeout to prevent indefinite zombie retry loops #9877

Sign in to view logs

feat(arbnode): add opt-in stalled execution timeout to prevent indefinite zombie retry loops

feat(arbnode): add opt-in stalled execution timeout to prevent indefinite zombie retry loops #9877

Triggered via pull request September 20, 2026 04:44
@AmirhoseinAmirhosein
opened #4747
Status Failure
Total duration 8s
Artifacts –

submodule-pin-check.yml

on: pull_request_target
Check Submodule Pin
4s
Check Submodule Pin
Fit to window
Zoom out
Zoom in

Annotations

1 error, 1 warning, and 1 notice
Check Submodule Pin
Refusing to check out fork pull request code from a 'pull_request_target' workflow. This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch cache scope, and runner access. Fetching and executing a fork's code in that trusted context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' on the actions/checkout step.
Workflow execution policy warning (evaluate mode): .github/workflows/submodule-pin-check.yml#L1
On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
Check Submodule Pin
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"