From 9a3a26cbd21bbe74519ca1558d5913e02fbd3b57 Mon Sep 17 00:00:00 2001
From: Patrick Connolly <patrick.c.connolly@gmail.com>
Date: Tue, 8 Oct 2024 15:27:05 -0400
Subject: [PATCH] Switched trigger for PRs to pull_request_target.

---
 .github/workflows/deploy-github-pages.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-github-pages.yml b/.github/workflows/deploy-github-pages.yml
index 55003bd..5904cb1 100644
--- a/.github/workflows/deploy-github-pages.yml
+++ b/.github/workflows/deploy-github-pages.yml
@@ -4,9 +4,13 @@ on:
   push:
     branches:
       - 'main'
-  pull_request:
+  # WARNING: This allows storybook-branch-switcher CLI to run `npm run ${arbitrary_script}`
+  # BUT the worst it can do is force changes to our GitHub Pages website,
+  # unless the permissions key below is changed.
+  pull_request_target:
     types: [opened, synchronize, reopened]
 
+# Be careful about changing these, due to pull_request_target trigger.
 permissions:
   contents: read
   pages: write