GITHUB_SHA correction for PRs

See: - hfhbd/ComposeTodo#797
MPV · Nov 6, 2023 · 0a0d3e2 · 0a0d3e2
1 parent 11ed13c
commit 0a0d3e2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
@@ -10,6 +10,10 @@ permissions:
   contents: write # for submitting dependency graph
   pull-requests: write # for comment-summary-in-pr
 
+env:
+  # workaround for PR support:
+  GITHUB_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+
 jobs:
   dependency-review:
     runs-on: ubuntu-latest