Switch both review workflows from pull_request to pull_request_target so they run with base repo permissions and can access secrets when reviewing fork PRs. Changes: - claude-code-review.yml: pull_request → pull_request_target - opencode-review.yml: pull_request → pull_request_target - Both now explicitly checkout PR head commit for review - Added security comments explaining the approach This allows the workflows to run successfully after maintainer approval for external contributor PRs. |
||
|---|---|---|
| .. | ||
| claude-code-review.yml | ||
| claude.yml | ||
| opencode-review.yml | ||
| test.yml | ||