fix workflows for fork PRs

.github/workflows/coverage.yml

@@ -6,7 +6,7 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - main
     # This needs to be declared explicitly so that the job is actually

.github/workflows/docker.yml

@@ -11,7 +11,7 @@ on:
     tags:
       - "*"
   merge_group:
-  pull_request:
+  pull_request_target:
     # This needs to be declared explicitly so that the job is actually
     # run when moved out of draft.
     types: [opened, synchronize, reopened, ready_for_review]

.github/workflows/docs.yml

@@ -10,7 +10,7 @@ on:
     branches:
       - main
   merge_group:
-  pull_request:
+  pull_request_target:
     branches:
       - main
 

.github/workflows/forest.yml

@@ -8,7 +8,7 @@ concurrency:
 on:
   workflow_dispatch:
   merge_group:
-  pull_request:
+  pull_request_target:
     branches:
       - main
   push:

.github/workflows/rust-lint.yml

@@ -8,7 +8,7 @@ concurrency:
 on:
   workflow_dispatch:
   merge_group:
-  pull_request:
+  pull_request_target:
     branches:
       - main
   push:

.github/workflows/scripts-lint.yml

@@ -7,7 +7,7 @@ concurrency:
 
 on:
   merge_group:
-  pull_request:
+  pull_request_target:
     branches:
       - main
   push:

.github/workflows/unit-tests.yml

@@ -8,7 +8,7 @@ concurrency:
 on:
   workflow_dispatch:
   merge_group:
-  pull_request:
+  pull_request_target:
     branches:
       - main
     # This needs to be declared explicitly so that the job is actually