run validation tasks using pull_request_target which will have perm…

…issions to interact with this repo through GH API

.github/workflows/check-feed-urls.yaml

@@ -1,7 +1,7 @@
 name: Check feed URLs in changed DMFR files
 
 on:
-  pull_request:
+  pull_request_target:
     paths:
       - 'feeds/*.dmfr.json'
     types: [opened, synchronize]

.github/workflows/format.yaml

@@ -1,6 +1,6 @@
 name: Comment on PRs that need DMFR formatting changes
 on: 
-  pull_request:
+  pull_request_target:
     paths:
       - '**.dmfr.json'
 permissions:

.github/workflows/validate.yml → .github/workflows/validate.yaml

@@ -1,5 +1,5 @@
 name: Validate
-on: [push, pull_request, workflow_dispatch]
+on: [push, pull_request_target, workflow_dispatch]
 jobs:
   build:
     runs-on: ubuntu-latest