🐛 Fix possible leak (W.i.P.) #4892

	name: PR Verifier

	on:
	# NB: using `pull_request_target` runs this in the context of
	# the base repository, so it has permission to upload to the checks API.
	# This means changes won't kick in to this file until merged onto the
	# main branch.
	pull_request_target:
	types: [opened, edited, reopened, synchronize]

	jobs:
	verify:
	name: verify PR contents
	permissions:
	checks: write
	pull-requests: read
	runs-on: ubuntu-latest
	steps:
	- name: Verifier action
	id: verifier
	uses: kubernetes-sigs/kubebuilder-release-tools@v0.4.3
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback