From 0ab1da11598467b944182748b8e8c6d363093544 Mon Sep 17 00:00:00 2001
From: Jeff Wong <awole20@gmail.com>
Date: Thu, 10 Dec 2020 15:11:53 -1000
Subject: [PATCH] FIX: remove pull for Discourse core (#499)

We are already shallow-fetching a few lines below. A pull with a shallow
clone can be dangerous if Discourse is using a different repository
or version, as that potentially results in more data being pulled or a
dirty merge with a different upstream.

Remove the pull and rely only on the fetch and checkout.
---
 templates/web.template.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/templates/web.template.yml b/templates/web.template.yml
index eb377ae..28fb22d 100644
--- a/templates/web.template.yml
+++ b/templates/web.template.yml
@@ -89,7 +89,6 @@ run:
         - git reset --hard
         - git clean -f
         - git remote set-branches --add origin master
-        - git pull
         - git remote set-branches origin $version
         - git fetch --depth 1 origin $version
         - git checkout $version
-- 
2.25.1