From c2ba1442a34e430c1fbbf8fae9efe43511d8dbcc Mon Sep 17 00:00:00 2001
From: qzl <qzl@example.com>
Date: Thu, 30 Apr 2026 11:17:00 +0800
Subject: [PATCH] fix(deploy): avoid external checkout action

---
 .gitea/workflows/build-production-docker.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build-production-docker.yml b/.gitea/workflows/build-production-docker.yml
index 05ca271..a67e285 100644
--- a/.gitea/workflows/build-production-docker.yml
+++ b/.gitea/workflows/build-production-docker.yml
@@ -14,7 +14,9 @@ jobs:
       IMAGE_SIZE_LIMIT_BYTES: 500000000
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        run: |
+          set -euo pipefail
+          git clone --depth 1 --branch "${GITHUB_REF_NAME:-main}" "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" .
 
       - name: Validate ECR configuration
         run: |