actions/checkout is the official GitHub action for checking out a repository into the workflow runner. It was updated to block common pwn request attack patterns by default, refusing to fetch fork pull request code in privileged workflows unless explicitly allowed.