From 6ef55913b74c70f6eb6ffc16f2d5ba5ad605f395 Mon Sep 17 00:00:00 2001
From: Axel Huebl <axel.huebl@plasma.ninja>
Date: Wed, 18 Oct 2023 18:45:15 -0700
Subject: [PATCH] CI: Stubs on `pull_request_target`

---
 .github/workflows/ci.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 57e091d6..d8dc140a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,7 @@ name: 👑 CI
 
 # This workflow updates the .pyi stub files for documentation and interactive use.
 
-on: [push, pull_request]
+on: [push, pull_request, pull_request_target]
 
 concurrency:
   group: ${{ github.ref }}-${{ github.head_ref }}-ci
@@ -10,28 +10,38 @@ concurrency:
 
 jobs:
   ubuntu:
+    if: github.event_name != 'pull_request_target'
     name: 🐧 Ubuntu
     uses: ./.github/workflows/ubuntu.yml
 
   intel:
+    if: github.event_name != 'pull_request_target'
     name: 🐧 Intel
     uses: ./.github/workflows/intel.yml
 
   hip:
+    if: github.event_name != 'pull_request_target'
     name: 🐧 HIP
     uses: ./.github/workflows/hip.yml
 
   macos:
+    if: github.event_name != 'pull_request_target'
     name: 🍏 macOS
     uses: ./.github/workflows/macos.yml
 
   windows:
+    if: github.event_name != 'pull_request_target'
     name: 🪟 Windows
     uses: ./.github/workflows/windows.yml
 
   stubs:
+    if: github.event_name != 'pull_request'
     name: 🔄 Update Stub Files
     needs: [ubuntu, intel, hip, macos, windows]
+    permissions:
+      # Give the default GITHUB_TOKEN write permission to commit and push the
+      # changed files back to the repository.
+      contents: write
     uses: ./.github/workflows/stubs.yml
 
   save_pr_number: