Refusing to check out fork pull request code from a 'pull_request_target' workflow.

[LordArrin]

Describe the bug
Error: Refusing to check out fork pull request code from a 'pull_request_target' workflow. This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch cache scope, and runner access. Fetching and executing a fork's code in that trusted context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' on the actions/checkout step.

To Reproduce

1. Create PR
2. Check refused to run
   Expected behavior
   A clear and concise description of what you expected to happen.

[LordArrin]

#5045, #5043

[LordArrin]

Run actions/checkout@v5
with:
ref: r34
repository: LordArrin/rss-bridge
token: ***
ssh-strict: true
ssh-user: git
persist-credentials: true
clean: true
sparse-checkout-cone-mode: true
fetch-depth: 1
fetch-tags: false
show-progress: true
lfs: false
submodules: false
set-safe-directory: true
allow-unsafe-pr-checkout: false
Error: Refusing to check out fork pull request code from a 'pull_request_target' workflow. This workflow runs with the base repository's GITHUB_TOKEN, secrets, default-branch cache scope, and runner access. Fetching and executing a fork's code in that trusted context commonly leads to "pwn request" vulnerabilities. To opt in, review the risks at https://gh.io/securely-using-pull_request_target and set 'allow-unsafe-pr-checkout: true' on the actions/checkout step.

[LordArrin]

Need to fix actions

[LordArrin]

@dvikan @Mynacol
Pls watch this problem, it's really important - can't import new bridges and support for others without correct checking