Refuse re-runs of fork pull request runs whose fork is gone, and keep fork re-runs untrusted
The re-run fell back to the base repository when the source fork no longer existed, which read the fork's workflow at that commit as trusted code. Assisted-by: Crush
2 files changed+75−2
Rendering diff…