ci fix?

Author: Raphaël Droz

.github/workflows/actions.yml

@@ -2,13 +2,26 @@ name: "CI"
 
 on:
   pull_request_target:
+    types: [opened, synchronize, reopened]
   push:
     branches:
       - 'v3'
       - 'feature/*'
       - 'fix/*'
   workflow_dispatch:
 
+permissions:
+  actions: read
+  checks: write
+  contents: read
+  deployments: read
+  issues: read
+  packages: read
+  pull-requests: write
+  repository-projects: read
+  security-events: read
+  statuses: write
+
 env:
   SAUCE_USERNAME: ${{secrets.SAUCE_USERNAME}}
   SAUCE_ACCESS_KEY: ${{secrets.SAUCE_ACCESS_KEY}}
@@ -31,6 +44,7 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 2
+          persist-credentials: false
 
       - name: Is environment ok
         run: |
@@ -40,6 +54,8 @@ jobs:
         id: source-changed
         uses: tj-actions/[email protected]
         with:
+          base_sha: ${{ github.event.pull_request.head.sha }}
+          sha: ${{ github.sha }}
           files: |
             src
             test