Avoid checking out on forks

[claudioandre-br]

Describe your changes

In the case of PRs from forks, it might be a bad idea to run a check out. Remove that.

From docs:

• GitHub Actions have imposed restrictions on workflow runs triggered by public repository forks.
• Checking out a branch from a different repository from where the workflow is executing will make that repository the target.

In short, a 'checkout' can confuse the GitHub API.

Checklist before requesting a review

• I checked that all workflows return a success.
• I have performed a self-review of my code.
• I have added tests that prove my fix is effective or that my feature works.
• I followed the Conventional Commit spec.

Maintainer tasks

• Label as either: bug, ci, docker, documentation, enhancement.
• Sign unsigned commits.

[claudioandre-br]

Using a syntax like this, I don't even need to be in the repository:

PR_URL="https://github.com/openwall/john-packages/pull/622"
$ gh pr view "$PR_URL" --json headRefName        --jq '.headRefName'

[claudioandre-br]

I tested it outside a git repository and it worked:

$ git log
fatal: not a git repository (or any of the parent directories): .git

$ gh pr view "$URL_ID" --json headRepository       --jq '.headRepository.name'
john-packages

$ echo $URL_ID
https://github.com/openwall/john-packages/pull/622

Let's push and pray.

[github-actions]

Auto approved PR

[claudioandre-br]

bot: MERGE trial

[claudioandre-br]

This 'idea' works:

• Using the source code as it is in claudioandre-br@c08c12d I as able to merge commit claudioandre-br@85d376f into
  claudioandre-br:main from step-security-bot:stepsecurity_remediation_1731944275

Superseded by #625.