Checkout last instead of merge commit in workflows

.github/workflows/build-binaries.yml

@@ -21,42 +21,48 @@ jobs:
   build-bootstrapper:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
           go-version: "1.19.1"
 
-      - name: Check out repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-
       - name: Build the bootstrapper
         uses: ./.github/actions/build_bootstrapper
 
   build-debugd:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
           go-version: "1.19.1"
 
-      - name: Check out repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-
       - name: Build debugd
         uses: ./.github/actions/build_debugd
 
   build-cdbg:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
           go-version: "1.19.1"
 
-      - name: Check out repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-
       - name: Build cdbg (Linux, amd64)
         uses: ./.github/actions/build_cdbg
         with:
@@ -84,28 +90,31 @@ jobs:
   build-disk-mapper:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
           go-version: "1.19.1"
-
-      - name: Check out repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-
       - name: Build disk-mapper
         uses: ./.github/actions/build_disk_mapper
 
   build-cli:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
           go-version: "1.19.1"
 
-      - name: Check out repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-
       - name: Build CLI (Linux, amd64)
         uses: ./.github/actions/build_cli
         with:

.github/workflows/check-licenses.yml

@@ -16,6 +16,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f

.github/workflows/check-links.yml

@@ -16,7 +16,10 @@ jobs:
   linkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@7884fcad6b5d53d10323aee724dc68d8b9096a2e
+      - name: Checkout
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Link Checker
         uses: lycheeverse/lychee-action@4a5af7cd2958a2282cefbd9c10f63bdb89982d76

.github/workflows/docs-vale.yml

@@ -15,6 +15,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
       - name: Vale
         uses: errata-ai/vale-action@753427452ff1d6cf7a7b76a552aa0cbee3971551
         with:

.github/workflows/test-govulncheck.yml

@@ -22,6 +22,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Install Dependencies
         run: sudo apt-get update && sudo apt-get -y install libcryptsetup-dev libvirt-dev

.github/workflows/test-integration.yml

@@ -24,6 +24,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f

.github/workflows/test-lint.yml

@@ -27,6 +27,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Install Dependencies
         run: sudo apt-get update && sudo apt-get -y install libcryptsetup-dev libvirt-dev

.github/workflows/test-shellcheck.yml

@@ -21,6 +21,9 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Run ShellCheck
         uses: ludeeus/action-shellcheck@203a3fd018dfe73f8ae7e3aa8da2c149a5f41c33
         with:

.github/workflows/test-tidy.yml

@@ -22,6 +22,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f

.github/workflows/test-unittest.yml

@@ -24,6 +24,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f