mirror of
https://github.com/pnpm/pnpm.git
synced 2026-07-18 03:32:36 -04:00
The benchmark report comment identifies which revision was benchmarked only via the workflow run, leaving the PR comment detached from the exact SHA when read later. Add a clickable short-SHA line directly under the report header so the comment is self-describing. SHA source is the PR head SHA on pull_request events (stable commit that survives merge), falling back to github.sha for push and workflow_dispatch. Display-only — the comment workflow continues to resolve the PR number from the trusted workflow_run payload, so the SHA in the fork-controlled artifact cannot redirect where the comment lands.