From f6b6af7486c9720d64bd54c09443f5d8bb36b2d7 Mon Sep 17 00:00:00 2001
From: Holger Friedrich <mail@holger-friedrich.de>
Date: Sun, 18 May 2025 20:47:14 +0200
Subject: [PATCH] [GHA] Permit rebuild from forks (#4808)

Signed-off-by: Holger Friedrich <mail@holger-friedrich.de>
---
 .github/workflows/rebuild.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/rebuild.yml b/.github/workflows/rebuild.yml
index 3b20e83c65..a7bb9e4fac 100644
--- a/.github/workflows/rebuild.yml
+++ b/.github/workflows/rebuild.yml
@@ -12,7 +12,7 @@
 name: Rebuild PR
 
 on:
-  pull_request:
+  pull_request_target:
     types: [labeled]
   workflow_dispatch:
     inputs:
@@ -52,12 +52,15 @@ jobs:
     - name: Checkout
       if: ${{ github.head_ref == '' && env.LABEL == 'rebuild' }}
       uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Checkout merge
       if: ${{ github.head_ref != '' && env.LABEL == 'rebuild' }}
       uses: actions/checkout@v4
       with:
         ref: refs/pull/${{github.event.pull_request.number}}/merge
+        persist-credentials: false
 
     - name: List Jobs
       if: ${{ env.LABEL == 'rebuild' }}