[CI] Use pull_request_target for coverage trigger (#990)

hugsy · web-flow · commit 67c363dea3af · 2023-08-16T07:34:30.000-07:00
Purely CI PR: use `pull_request_target` with custom permission to ensure external PRs can still trigger the coverage script.
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -1,11 +1,13 @@
 name: CI Coverage for PR
 
-on:
-  pull_request:
+on: [ pull_request, pull_request_target ]
 
 jobs:
   coverage:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
     - uses: actions/checkout@v3
       with:
