FIX: remove pull for Discourse core (#499)

We are already shallow-fetching a few lines below. A pull with a shallow
clone can be dangerous if Discourse is using a different repository
or version, as that potentially results in more data being pulled or a
dirty merge with a different upstream.

Remove the pull and rely only on the fetch and checkout.

diff --git a/templates/web.template.yml b/templates/web.template.yml
index eb377ae4ea920d93a07ddaafe24c488ad9b67fe0..28fb22d00877400050c0705671965780e72ba0b4 100644 (file)
--- a/templates/web.template.yml
+++ b/templates/web.template.yml
@@ -89,7 +89,6 @@ run:
         - git reset --hard
         - git clean -f
         - git remote set-branches --add origin master
-        - git pull
         - git remote set-branches origin $version
         - git fetch --depth 1 origin $version
         - git checkout $version