Fix multiple triggers

Author: VimukthiPerera

.github/workflows/linter.yml

@@ -11,20 +11,24 @@ permissions:
 
 jobs:
   lint:
-    if: github.event_name == 'pull_request' || (github.event_name == 'pull_request_review' && github.event.review.state == 'approved')
+    if: github.event.review.state == 'approved'
     name: Lint Code Base
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
-          # Check out the head of the PR specifically
-          ref: ${{ github.event.pull_request.head.sha }}
+          # Check out the PR head through GitHub's pull ref for review events
+          ref: refs/pull/${{ github.event.pull_request.number }}/head
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
           # Disable credential persistence to harden the runner
           persist-credentials: false
 
+      - name: Set lint SHA from checked-out HEAD
+        id: set_lint_sha
+        run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+
       - name: Fetch base branch for diff
         run: git fetch --no-tags --prune origin "+refs/heads/${{ github.event.pull_request.base.ref }}:refs/remotes/origin/${{ github.event.pull_request.base.ref }}"
 
@@ -33,5 +37,5 @@ jobs:
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: ${{ github.event.pull_request.base.ref }}
-          GITHUB_SHA: ${{ github.event.pull_request.head.sha }}
+          GITHUB_SHA: ${{ steps.set_lint_sha.outputs.sha }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}