From 463bf25a151448ce5bc7ec8647621716b36c90e5 Mon Sep 17 00:00:00 2001
From: Justin Stephenson <jstephen@redhat.com>
Date: Thu, 6 Feb 2025 09:03:16 -0500
Subject: [PATCH] ci: Have coverity workflow run against PR code
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Checkout the head of the pull request code instead of the
target branch, this is needed when using `pull_request_target`
workflow.

Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
---
 .github/workflows/coverity.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 004eba2fd2..609a0d0064 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -25,6 +25,9 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+        persist-credentials: false
 
     - name: Install dependencies
       uses: ./.github/actions/install-dependencies