Add preview links comment to PRs

.github/workflows/preview-build.yml

@@ -1,7 +1,7 @@
 name: preview-build
 
 on:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - synchronize
@@ -43,12 +43,17 @@ on:
         type: string
         default: 'false'
         required: false
+      disable-comments:
+        description: 'Disable comments'
+        type: boolean
+        default: false
+        required: false
 
 permissions:
   id-token: write
   deployments: write
   contents: read
-  pull-requests: read
+  pull-requests: write
 
 jobs:
   match:
@@ -112,6 +117,7 @@ jobs:
         id: check-files
         uses: tj-actions/changed-files@2f7c5bfce28377bc069a65ba478de0a74aa0ca32 # v46.0.1
         with:
+          safe_output: false # set to false because we are using an environment variable to store the output and avoid command injection.
           files: ${{ inputs.path-pattern != '' && inputs.path-pattern || '**' }}
 
       - name: Checkout
@@ -231,6 +237,70 @@ jobs:
           aws cloudfront create-invalidation \
             --distribution-id EKT7LT5PM8RKS \
             --paths "${PATH_PREFIX}" "${PATH_PREFIX}/*"
+
+      - name: Comment on PR
+        continue-on-error: true
+        if: inputs.disable-comments != 'true' && env.MATCH == 'true' && steps.deployment.outputs.result && steps.check-files.outputs.all_changed_files
+        uses: actions/github-script@v7
+        env:
+          ALL_CHANGED_FILES: ${{ steps.check-files.outputs.all_changed_files }}
+        with:
+          script: |
+            const title = '## 🔍 Preview links for changed docs'
+            const changedMdFiles = process.env.ALL_CHANGED_FILES
+              .split(/\s+/)
+              .filter(i => i.endsWith('.md'))
+              .filter(i => !i.includes('/_snippets/'));
+
+            if (changedMdFiles.length === 0) {
+              return;
+            }
+
+            const toLink = (file) => {
+              const path = file
+                .replace('docs/', '')
+                .replace('/index.md', '')
+                .replace('.md', '');
+              return `[${file}](https://docs-v3-preview.elastic.dev${process.env.PATH_PREFIX}/${path})`;
+            }
+
+            const links = changedMdFiles.map(toLink)
+
+            const body = [
+              title,
+              ...links.slice(0, 20).map(i => `- ${i}`),
+            ]
+
+            if (links.length > 20) {
+              body.push('');
+              body.push(`<sub>There are ${links.length - 20} more links...</sub>`);
+            }
+
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+            const issue_number = context.payload.pull_request.number;
+
+            // Post or update a single bot comment
+            const { data: comments } = await github.rest.issues.listComments({
+              owner, repo, issue_number
+            });
+            const existing = comments.find(c =>
+              c.user.type === 'Bot' &&
+              c.body.startsWith(title)
+            );
+            if (existing) {
+              await github.rest.issues.updateComment({
+                owner, repo,
+                comment_id: existing.id,
+                body: body.join('\n'),
+              });
+            } else {
+              await github.rest.issues.createComment({
+                owner, repo,
+                issue_number,
+                body:body.join('\n'),
+              });
+            }
 
       - name: Update Link Index
         if: |