[CI] Use pull_request_target for coverage trigger (#990)

Purely CI PR: use `pull_request_target` with custom permission to ensure external PRs can still trigger the coverage script.
hugsy · Aug 16, 2023 · 67c363d · 67c363d
1 parent 371f273
commit 67c363d
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -1,11 +1,13 @@
 name: CI Coverage for PR
 
-on:
-  pull_request:
+on: [ pull_request, pull_request_target ]
 
 jobs:
   coverage:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
     - uses: actions/checkout@v3
       with: