fix checkout-ref - don't fall back to the main branch! Use the ref of the event that triggered the action (github.ref)

Author: aSemy

.github/workflows/run_gradle_task.yml

@@ -58,7 +58,7 @@ jobs:
       - name: Checkout the repo
         uses: actions/checkout@v3
         with:
-          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+          ref: ${{ inputs.checkout-ref || github.ref }}
 
       - name: Validate Gradle Wrapper
         uses: gradle/wrapper-validation-action@v1

.github/workflows/run_publish_maven.yml

@@ -30,6 +30,7 @@ permissions:
 jobs:
 
   sonatype-release:
+    if: github.ref == 'refs/heads/main'
     permissions:
       contents: read
       packages: write
@@ -40,4 +41,4 @@ jobs:
       runs-on: macos-latest # only macOS supports building all Kotlin targets
       gradle-task: >-
         publishAllPublicationsToSonatypeReleaseRepository --stacktrace --no-configuration-cache --no-parallel
-      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+      checkout-ref: ${{ inputs.checkout-ref }}

.github/workflows/run_publish_site.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Checkout the repo
         uses: actions/checkout@v3
         with:
-          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+          ref: ${{ inputs.checkout-ref || github.ref }}
 
       - name: Validate Gradle Wrapper
         uses: gradle/wrapper-validation-action@v1

.github/workflows/run_tests.yml

@@ -1,9 +1,11 @@
 name: Tests
 
+
 on:
   workflow_dispatch:
   workflow_call:
 
+
 concurrency:
   group: "Tests: ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
   cancel-in-progress: true

.github/workflows/workflow_release.yml

@@ -37,7 +37,7 @@ jobs:
       contents: write
       packages: write
     with:
-      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+      checkout-ref: ${{ inputs.checkout-ref }}
 
   publish-site:
     needs: tests
@@ -51,4 +51,4 @@ jobs:
       packages: write
       pages: write      # to deploy to Pages
     with:
-      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+      checkout-ref: ${{ inputs.checkout-ref }}