From 7eddee3be86dbeefc06990d817768e15de42d9fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?H=C3=A9ctor?= <27339341+priethor@users.noreply.github.com>
Date: Wed, 26 Jul 2023 18:10:17 +0200
Subject: [PATCH] Enforce PR labels: use `pull_request_target` event to work
 with PRs coming from forks (#52981)

---
 .github/workflows/enforce-pr-labels.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/enforce-pr-labels.yml b/.github/workflows/enforce-pr-labels.yml
index 6d718068b8b7d..6d6ea87eea2f4 100644
--- a/.github/workflows/enforce-pr-labels.yml
+++ b/.github/workflows/enforce-pr-labels.yml
@@ -1,13 +1,12 @@
 name: Enforce labels on Pull Request
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, labeled, unlabeled, synchronize]
 jobs:
   type-related-labels:
     runs-on: ubuntu-latest
     permissions:
-      issues: read
-      pull-requests: read
+      pull-requests: write
     steps:
       - uses: mheap/github-action-required-labels@v5
         with:
@@ -16,5 +15,4 @@ jobs:
           labels: "[Type] Accessibility (a11y), [Type] Automated Testing, [Type] Breaking Change, [Type] Bug, [Type] Build Tooling, [Type] Code Quality, [Type] Copy, [Type] Developer Documentation, [Type] Enhancement, [Type] Experimental, [Type] Feature, [Type] New API, [Type] Task, [Type] Performance, [Type] Project Management, [Type] Security, [Type] WP Core Ticket"
           add_comment: true
           message: "## ⚠️ Type of PR label error\n To merge this PR, it requires {{ errorString }} {{ count }} label indicating the type of PR. Other labels are optional and not being checked here. \n- **Type-related labels to choose from**: {{ provided }}.\n- **Labels found**: {{ applied }}."
-          token: ${{ secrets.GITHUB_TOKEN }}
           exit_type: success