Skip to content

checkout

Version Control

Action for checking out a repo

Track releases GitHub Website
TypeScript Latest v2.8.0 · 6d ago Security brief →

Features

  • Checks out repository under $GITHUB_WORKSPACE for workflow access
  • Supports authenticated Git operations using PAT or SSH key
  • Allows configuration of fetch depth, ref, token, and SSH settings

Recent releases

View all 15 releases →
v2.8.0 Breaking risk
⚠ Upgrade required
  • If you depend on the previous default allowing unsafe PR target workflows, add `allow-unsafe-pr-checkout: true` in your checkout action configuration after upgrading to v2.8.0.
Breaking changes
  • Removed implicit unsafe behavior for `pull_request_target` in GitHub Actions; `allow-unsafe-pr-checkout` flag must be explicitly enabled to restore previous functionality.
Full changelog

What's Changed

  • [BREAKING] backport allow-unsafe-pr-checkout to v2 by @aiqiaoy in https://github.com/actions/checkout/pull/2504
  • backport fixes to releases-v2 by @aiqiaoy in https://github.com/actions/checkout/pull/2526

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v2.7.0...v2.8.0

View release on GitHub
v3.7.0 Breaking risk
Breaking changes
  • Backported `allow-unsafe-pr-checkout` flag to v3 (BREAKING change)
Full changelog

What's Changed

  • [BREAKING] backport allow-unsafe-pr-checkout to v3 by @aiqiaoy in https://github.com/actions/checkout/pull/2503
  • backport fixes to releases-v3 by @aiqiaoy in https://github.com/actions/checkout/pull/2525

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v3.6.0...v3.7.0

View release on GitHub
v4.4.0 Breaking risk
Breaking changes
  • Backported `allow-unsafe-pr-checkout` flag to version 4, altering runtime behavior.
Full changelog

What's Changed

  • [BREAKING] backport allow-unsafe-pr-checkout to v4 by @aiqiaoy in https://github.com/actions/checkout/pull/2502
  • backport fixes to releases-v4 by @aiqiaoy in https://github.com/actions/checkout/pull/2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v4.3.1...v4.4.0

View release on GitHub
v5.1.0 Breaking risk
Breaking changes
  • Backported `allow-unsafe-pr-checkout` flag to version 5 (removes prior unsafe default behavior)
Full changelog

What's Changed

  • [BREAKING] backport allow-unsafe-pr-checkout to v5 by @aiqiaoy in https://github.com/actions/checkout/pull/2501
  • backport fixes to releases-v5 by @aiqiaoy in https://github.com/actions/checkout/pull/2523

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v5.0.1...v5.1.0

View release on GitHub
v6.1.0 Breaking risk
Breaking changes
  • Backported the `allow-unsafe-pr-checkout` flag to version 6, altering default behavior.
Full changelog

What's Changed

  • [BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in https://github.com/actions/checkout/pull/2500
  • backport fixes to releases-v6 by @aiqiaoy in https://github.com/actions/checkout/pull/2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v6.1.0

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
8,459
Forks
2,605
Languages
TypeScript Shell JavaScript
Downloads/week
8 ↑88%
NPM Maintainers
1
Contributors
62
View on GitHub View on npm

Community & Support

Community

Similar tools

cache
Automatic Git snapshots while AI agents edit your repo
act
release-please-action

Beta — feedback welcome: [email protected]