From 84890c45d328fb1e9a9a71be45d29ef1c7a67158 Mon Sep 17 00:00:00 2001
From: Zhiyao Cen <61925104+cennn@users.noreply.github.com>
Date: Wed, 12 Aug 2026 17:24:27 +0800
Subject: [PATCH] ci: use pull_request_target for fork PR secrets access (#56)

With pull_request, GitHub does not inject secrets for fork PRs (even
after maintainer approval). pull_request_target runs the workflow YAML
from the base branch so secrets are safely available. The _ci_pipeline
already checks out the PR commit via head-sha, so no other changes are
needed.
---
 .github/workflows/integration_test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/integration_test.yml b/.github/workflows/integration_test.yml
index 16eaf43..f66c1e5 100644
--- a/.github/workflows/integration_test.yml
+++ b/.github/workflows/integration_test.yml
@@ -1,7 +1,7 @@
 name: Integration Test on PR
 
 on:
-    pull_request:
+    pull_request_target:
         types: [opened, reopened, synchronize, ready_for_review]
         branches:
         -   main