From 8fecef0686275c9ce334ac7b6780d35eb93b836f Mon Sep 17 00:00:00 2001
From: comfyanonymous <121283862+comfyanonymous@users.noreply.github.com>
Date: Thu, 21 May 2026 16:39:19 -0700
Subject: [PATCH] Add validation for source branch in backport workflow
 (#14042)

---
 .github/workflows/backport_release.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/backport_release.yaml b/.github/workflows/backport_release.yaml
index b28d62656..03788dd48 100644
--- a/.github/workflows/backport_release.yaml
+++ b/.github/workflows/backport_release.yaml
@@ -42,8 +42,13 @@ jobs:
       - name: Validate source branch exists
         env:
           SOURCE_BRANCH: ${{ inputs.branch }}
+          DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
         run: |
           set -euo pipefail
+          if [[ "${SOURCE_BRANCH}" == "${DEFAULT_BRANCH}" ]]; then
+            echo "::error::Source branch must not be the default branch ('${DEFAULT_BRANCH}')."
+            exit 1
+          fi
           git fetch origin "refs/heads/${SOURCE_BRANCH}:refs/remotes/origin/${SOURCE_BRANCH}"
           if ! git show-ref --verify --quiet "refs/remotes/origin/${SOURCE_BRANCH}"; then
             echo "::error::Source branch '${SOURCE_BRANCH}' not found on origin."