From 9881d15d8355451f0adf7a7334b6b72197aaec5e Mon Sep 17 00:00:00 2001
From: Will Scullin <scullin@meta.com>
Date: Fri, 3 Jan 2025 08:58:16 -0800
Subject: [PATCH] Enable pull-request-target for github actions

---
 .github/workflows/db-duckdb-wasm.yaml | 4 ++--
 .github/workflows/db-duckdb.yaml      | 4 ++--
 .github/workflows/db-motherduck.yaml  | 1 +
 .github/workflows/db-mysql.yaml       | 2 +-
 .github/workflows/db-postgres.yaml    | 2 +-
 .github/workflows/db-presto.yaml      | 1 +
 .github/workflows/db-snowflake.yaml   | 1 +
 .github/workflows/db-trino.yaml       | 1 +
 .github/workflows/main.yaml           | 1 +
 9 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/db-duckdb-wasm.yaml b/.github/workflows/db-duckdb-wasm.yaml
index 4acc430a9..8d3e37937 100644
--- a/.github/workflows/db-duckdb-wasm.yaml
+++ b/.github/workflows/db-duckdb-wasm.yaml
@@ -1,6 +1,6 @@
-name: "DB:DuckDB(WASM)"
+name: 'DB:DuckDB(WASM)'
 
-on: [pull_request, workflow_call]
+on: [pull_request, pull_request_target, workflow_call]
 
 jobs:
   test-duckdb-wasm:
diff --git a/.github/workflows/db-duckdb.yaml b/.github/workflows/db-duckdb.yaml
index 7b4f7a56d..3a0cea031 100644
--- a/.github/workflows/db-duckdb.yaml
+++ b/.github/workflows/db-duckdb.yaml
@@ -1,6 +1,6 @@
-name: "DB:DuckDB"
+name: 'DB:DuckDB'
 
-on: [pull_request, workflow_call]
+on: [pull_request, pull_request_target, workflow_call]
 
 jobs:
   test-duckdb:
diff --git a/.github/workflows/db-motherduck.yaml b/.github/workflows/db-motherduck.yaml
index 916714114..3963fd946 100644
--- a/.github/workflows/db-motherduck.yaml
+++ b/.github/workflows/db-motherduck.yaml
@@ -2,6 +2,7 @@ name: "DB:MotherDuck"
 
 on:
   pull_request:
+  pull_request_target:
   workflow_call:
     secrets:
       MOTHERDUCK_TOKEN_10:
diff --git a/.github/workflows/db-mysql.yaml b/.github/workflows/db-mysql.yaml
index b23bc31ce..28c61bb8c 100644
--- a/.github/workflows/db-mysql.yaml
+++ b/.github/workflows/db-mysql.yaml
@@ -1,6 +1,6 @@
 name: "DB:MySQL"
 
-on: [pull_request, workflow_call]
+on: [pull_request, pull_request_target, workflow_call]
 
 jobs:
   # Label of the container job
diff --git a/.github/workflows/db-postgres.yaml b/.github/workflows/db-postgres.yaml
index b7b3db892..980150595 100644
--- a/.github/workflows/db-postgres.yaml
+++ b/.github/workflows/db-postgres.yaml
@@ -1,6 +1,6 @@
 name: "DB:Postgres"
 
-on: [pull_request, workflow_call]
+on: [pull_request, pull_request_target, workflow_call]
 
 jobs:
   # Label of the container job
diff --git a/.github/workflows/db-presto.yaml b/.github/workflows/db-presto.yaml
index 8baad930d..e73e12ddf 100644
--- a/.github/workflows/db-presto.yaml
+++ b/.github/workflows/db-presto.yaml
@@ -2,6 +2,7 @@ name: "DB:Presto"
 
 on:
   pull_request:
+  pull_request_target:
   workflow_call:
     secrets:
       BQ_PRESTO_TRINO_KEY:
diff --git a/.github/workflows/db-snowflake.yaml b/.github/workflows/db-snowflake.yaml
index 0accc0f77..18d0467c7 100644
--- a/.github/workflows/db-snowflake.yaml
+++ b/.github/workflows/db-snowflake.yaml
@@ -2,6 +2,7 @@ name: "DB:Snowflake"
 
 on:
   pull_request:
+  pull_request_target:
   workflow_call:
     secrets:
       SNOWFLAKE_CONNECTION:
diff --git a/.github/workflows/db-trino.yaml b/.github/workflows/db-trino.yaml
index 3783bbca7..9655310e8 100644
--- a/.github/workflows/db-trino.yaml
+++ b/.github/workflows/db-trino.yaml
@@ -2,6 +2,7 @@ name: "DB:Trino"
 
 on:
   pull_request:
+  pull_request_target:
   workflow_call:
     secrets:
       BQ_PRESTO_TRINO_KEY:
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index b3a4d5aca..1f3e5bfb1 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -6,6 +6,7 @@ name: Core
 
 on:
   pull_request:
+  pull_request_target:
   workflow_call:
     secrets:
       BIGQUERY_KEY: