From 7fd6bfd5c72104f63670a363745e99d19f77aec9 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Tue, 11 Aug 2026 10:47:47 -0700
Subject: [PATCH] ci: judge PR bodies with the base branch's checker script

---
 .github/workflows/pr-body-template.yml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr-body-template.yml b/.github/workflows/pr-body-template.yml
index 0a93cef386c..963467cc841 100644
--- a/.github/workflows/pr-body-template.yml
+++ b/.github/workflows/pr-body-template.yml
@@ -34,6 +34,18 @@ jobs:
           sparse-checkout: .github/scripts
           persist-credentials: false
 
+      # The judging copy of the script comes from the base branch so a PR
+      # cannot weaken the checker that judges it. The merge-ref copy above is
+      # only the fallback for the PR that first introduces the script, when
+      # the base branch does not have it yet.
+      - name: Checkout the base branch's lint script
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          sparse-checkout: .github/scripts
+          persist-credentials: false
+          path: base-ref
+
       - name: List changed files
         env:
           GH_TOKEN: ${{ github.token }}
@@ -44,4 +56,7 @@ jobs:
       - name: Check body against template comment rules
         env:
           PR_BODY: ${{ github.event.pull_request.body }}
-        run: python3 .github/scripts/check_pr_body.py --changed-files changed_files.txt
+        run: |
+          SCRIPT=base-ref/.github/scripts/check_pr_body.py
+          [ -f "$SCRIPT" ] || SCRIPT=.github/scripts/check_pr_body.py
+          python3 "$SCRIPT" --changed-files changed_files.txt