Update code-path-changes.yml

[bretg]

Turns out in order for this to work for forked repos the trigger needs to be 'pull_request_target' rather than 'pull_request'

🔧 Type of changes

• new bid adapter
• bid adapter update
• new feature
• new analytics adapter
• new module
• module update
• bugfix
• documentation
• configuration
• dependency update
• tech debt (test coverage, refactorings, etc.)

✨ What's the context?

Code path notifications are not working for PRs from forked repos

[Net-burst]

This might be a potential security issue because this way all of the secrets are exposed. I think the common practice for when you need this is to limit the permissions. This should be enough for our use case:

permissions:
  contents: read

[bretg]

Ok, added read-all permissions. https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token

[Net-burst]

LGTM for now with the intention to see whether it will work in the first place and stricten the permissions later.

[Net-burst]

LGTM