From 67c363dea3af49a7fe75d85bbd6a5d281c3f171f Mon Sep 17 00:00:00 2001
From: crazy hugsy <hugsy@users.noreply.github.com>
Date: Wed, 16 Aug 2023 07:34:30 -0700
Subject: [PATCH] [CI] Use `pull_request_target` for coverage trigger (#990)

Purely CI PR: use `pull_request_target` with custom permission to ensure external PRs can still trigger the coverage script.
---
 .github/workflows/coverage.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index b478f20ac..b985d1103 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,11 +1,13 @@
 name: CI Coverage for PR
 
-on:
-  pull_request:
+on: [ pull_request, pull_request_target ]
 
 jobs:
   coverage:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
     - uses: actions/checkout@v3
       with: