From 7c7bc2228ddf18c1101b781129e84dd7b99f23ee Mon Sep 17 00:00:00 2001
From: drhgencer <gancer16@gmail.com>
Date: Fri, 6 Feb 2026 02:31:03 +0530
Subject: [PATCH] fix(ci): use commit SHA instead of branch ref in changelog
 workflow (#21866)

---
 .github/workflows/changelog.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index becb33a0c1..2f92d6eb8f 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -6,6 +6,8 @@ on:
 
 jobs:
   changelog:
+    # Skip for fork PRs since they can't access secrets
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -14,7 +16,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          ref: ${{ github.head_ref }}
+          ref: ${{ github.event.pull_request.head.sha }}
       - run: npm install -g @anthropic-ai/claude-code
       - uses: wevm/changelogs/check@master
         with: