mirror of
https://github.com/actions/checkout.git
synced 2026-03-19 18:40:23 +08:00
- Kill git process on timeout: use child_process.spawn directly for
timeout-eligible operations so we have a ChildProcess handle to send
SIGTERM (then SIGKILL after 5s). On Windows, SIGTERM is a forced kill
so the SIGKILL fallback is effectively a no-op there.
- Fix timeout:0 not working: replace falsy || coalescion with explicit
empty-string check so that '0' is not replaced by the default '300'.
- Refactor execGit to use an options object instead of 5 positional
parameters, eliminating error-prone filler args (false, false, {}).
- Pass allowAllExitCodes through to execGitWithTimeout so both code
paths have consistent behavior for non-zero exit codes.
- Add settled guard to prevent double-reject when both close and error
events fire on the spawned process.
- Handle null exit code (process killed by signal) as an error rather
than silently treating it as success.
- Capture stderr in error messages for the timeout path, matching the
information level of the non-timeout exec path.
- Log SIGKILL failures at debug level instead of empty catch block.
- Warn on customListeners being ignored in the timeout path.
- Emit core.warning() when invalid input values are silently replaced
with defaults, so users know their configuration was rejected.
- Add input validation in setTimeout (reject negative values).
- Clarify retry-max-attempts semantics: total attempts including the
initial attempt (3 = 1 initial + 2 retries).
- Remove Kubernetes probe references from descriptions.
- Use non-exhaustive list (e.g.) for network operations in docs to
avoid staleness if new operations are added.
- Add tests for timeout/retry input parsing (defaults, timeout:0,
custom values, invalid input with warnings, backoff clamping) and
command manager configuration (setTimeout, setRetryConfig, fetch).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
131 lines
5.4 KiB
YAML
131 lines
5.4 KiB
YAML
name: 'Checkout'
|
|
description: 'Checkout a Git repository at a particular version'
|
|
inputs:
|
|
repository:
|
|
description: 'Repository name with owner. For example, actions/checkout'
|
|
default: ${{ github.repository }}
|
|
ref:
|
|
description: >
|
|
The branch, tag or SHA to checkout. When checking out the repository that
|
|
triggered a workflow, this defaults to the reference or SHA for that
|
|
event. Otherwise, uses the default branch.
|
|
token:
|
|
description: >
|
|
Personal access token (PAT) used to fetch the repository. The PAT is configured
|
|
with the local git config, which enables your scripts to run authenticated git
|
|
commands. The post-job step removes the PAT.
|
|
|
|
|
|
We recommend using a service account with the least permissions necessary.
|
|
Also when generating a new PAT, select the least scopes necessary.
|
|
|
|
|
|
[Learn more about creating and using encrypted secrets](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets)
|
|
default: ${{ github.token }}
|
|
ssh-key:
|
|
description: >
|
|
SSH key used to fetch the repository. The SSH key is configured with the local
|
|
git config, which enables your scripts to run authenticated git commands.
|
|
The post-job step removes the SSH key.
|
|
|
|
|
|
We recommend using a service account with the least permissions necessary.
|
|
|
|
|
|
[Learn more about creating and using
|
|
encrypted secrets](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets)
|
|
ssh-known-hosts:
|
|
description: >
|
|
Known hosts in addition to the user and global host key database. The public
|
|
SSH keys for a host may be obtained using the utility `ssh-keyscan`. For example,
|
|
`ssh-keyscan github.com`. The public key for github.com is always implicitly added.
|
|
ssh-strict:
|
|
description: >
|
|
Whether to perform strict host key checking. When true, adds the options `StrictHostKeyChecking=yes`
|
|
and `CheckHostIP=no` to the SSH command line. Use the input `ssh-known-hosts` to
|
|
configure additional hosts.
|
|
default: true
|
|
ssh-user:
|
|
description: >
|
|
The user to use when connecting to the remote SSH host. By default 'git' is used.
|
|
default: git
|
|
persist-credentials:
|
|
description: 'Whether to configure the token or SSH key with the local git config'
|
|
default: true
|
|
path:
|
|
description: 'Relative path under $GITHUB_WORKSPACE to place the repository'
|
|
clean:
|
|
description: 'Whether to execute `git clean -ffdx && git reset --hard HEAD` before fetching'
|
|
default: true
|
|
filter:
|
|
description: >
|
|
Partially clone against a given filter.
|
|
Overrides sparse-checkout if set.
|
|
default: null
|
|
sparse-checkout:
|
|
description: >
|
|
Do a sparse checkout on given patterns.
|
|
Each pattern should be separated with new lines.
|
|
default: null
|
|
sparse-checkout-cone-mode:
|
|
description: >
|
|
Specifies whether to use cone-mode when doing a sparse checkout.
|
|
default: true
|
|
fetch-depth:
|
|
description: 'Number of commits to fetch. 0 indicates all history for all branches and tags.'
|
|
default: 1
|
|
fetch-tags:
|
|
description: 'Whether to fetch tags, even if fetch-depth > 0.'
|
|
default: false
|
|
show-progress:
|
|
description: 'Whether to show progress status output when fetching.'
|
|
default: true
|
|
lfs:
|
|
description: 'Whether to download Git-LFS files'
|
|
default: false
|
|
submodules:
|
|
description: >
|
|
Whether to checkout submodules: `true` to checkout submodules or `recursive` to
|
|
recursively checkout submodules.
|
|
|
|
|
|
When the `ssh-key` input is not provided, SSH URLs beginning with `git@github.com:` are
|
|
converted to HTTPS.
|
|
default: false
|
|
set-safe-directory:
|
|
description: Add repository path as safe.directory for Git global config by running `git config --global --add safe.directory <path>`
|
|
default: true
|
|
timeout:
|
|
description: >
|
|
Timeout in seconds for each git network operation attempt (e.g. fetch, lfs-fetch, ls-remote).
|
|
If a single attempt exceeds this, the process is terminated.
|
|
If retries are configured (see retry-max-attempts), the operation will be retried.
|
|
Set to 0 to disable. Default is 300 (5 minutes).
|
|
default: 300
|
|
retry-max-attempts:
|
|
description: >
|
|
Total number of attempts for each git network operation (including the initial attempt).
|
|
For example, 3 means one initial attempt plus up to 2 retries.
|
|
default: 3
|
|
retry-min-backoff:
|
|
description: >
|
|
Minimum backoff time in seconds between retry attempts.
|
|
The actual backoff is randomly chosen between min and max.
|
|
default: 10
|
|
retry-max-backoff:
|
|
description: >
|
|
Maximum backoff time in seconds between retry attempts.
|
|
The actual backoff is randomly chosen between min and max.
|
|
default: 20
|
|
github-server-url:
|
|
description: The base URL for the GitHub instance that you are trying to clone from, will use environment defaults to fetch from the same instance that the workflow is running from unless specified. Example URLs are https://github.com or https://my-ghes-server.example.com
|
|
required: false
|
|
outputs:
|
|
ref:
|
|
description: 'The branch, tag or SHA that was checked out'
|
|
commit:
|
|
description: 'The commit SHA that was checked out'
|
|
runs:
|
|
using: node24
|
|
main: dist/index.js
|
|
post: dist/index.js
|