Update docs to use base_ref instead of head for actions/checkout

Author: BakerNet

.github/workflows/codeowners.yml

@@ -23,6 +23,7 @@ jobs:
       - name: 'Checkout Code Repository'
         uses: actions/checkout@v5
         with:
+          ref: ${{ github.base_ref }}
           fetch-depth: 0
 
       - name: 'Update action.yml to build locally'

README.md

@@ -89,6 +89,7 @@ jobs:
       - name: 'Checkout Code Repository'
         uses: actions/checkout@v4
         with:
+          ref: ${{ github.base_ref }}  # use the base_ref to prevent bypass by PR author
           fetch-depth: 0
 
       - name: 'Codeowners Plus'