1 story taggedactions/checkout.
Blocking malicious code execution from pull_request_target workflows.