From 3ab7f855332609c582b430e074dcf4d6df40aa96 Mon Sep 17 00:00:00 2001
From: Justin Stephenson <jstephen@redhat.com>
Date: Thu, 6 Feb 2025 09:03:16 -0500
Subject: [PATCH] ci: Have coverity workflow run against PR code

Checkout the head of the pull request code instead of the
target branch, this is needed when using `pull_request_target`
workflow.
---
 .github/workflows/coverity.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index bd03c35d56..040dbfe09d 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -25,6 +25,9 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+        persist-credentials: false
 
     - name: Install dependencies
       uses: ./.github/actions/install-dependencies