feat: allow to override default sha when using action in a post-workflow

[benoitf]

Action runs smoothly when using pull_request/push events

but it does not work well when using completed workflow

In order to use this action using forked repositories, there are two ways

• use pull_request_target event on the sha of the pull_request (but it's mostly discouraged as it can lead to security issues)
• use a pull_request workflow that collect files (like asciidoc files) and add them to a workflow artifact. Then another workflow is triggered to scan this temporary artifact with the current vale action. It works fine but the result is not applied to the correct git SHA. So add an environment variable to handle that.

I'm fine if you prefer to introduce a new input parameter for that.

[jdkato]

I'm fine if you prefer to introduce a new input parameter for that.

Where is $pr_sha coming from in your example?

[jdkato]

Sorry for the delay here.

After the last comment, this kind of fell off my radar.

[benoitf]

thanks @jdkato