[cloudstack] branch main updated: replace pull_request_target with pull_request

[dahn]

This is an automated email from the ASF dual-hosted git repository.

dahn pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/main by this push:
     new 216c5653081 replace pull_request_target with pull_request
216c5653081 is described below

commit 216c56530812a7c9118f65927ec3e6e848fa75fb
Author: Daan Hoogland <d...@onecht.net>
AuthorDate: Tue May 9 18:39:10 2023 +0200

    replace pull_request_target with pull_request
---
 .github/workflows/sonar-check.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/sonar-check.yml 
b/.github/workflows/sonar-check.yml
index 2bfdaf0a65f..e473ac21ee4 100644
--- a/.github/workflows/sonar-check.yml
+++ b/.github/workflows/sonar-check.yml
@@ -17,10 +17,12 @@
 
 name: Sonar Quality Check
 
-on: [pull_request_target]
+on: [pull_request]
 
 permissions:
-  contents: read
+ dd contents: read
+  contents: read # to fetch code (actions/checkout)
+  pull-requests: write # for sonar to comment on pull-request
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || 
github.ref }}