From 3be1bb37d9feead00665dead79801c87539bd7c2 Mon Sep 17 00:00:00 2001
From: Xuan Yang <xygoogle@google.com>
Date: Wed, 30 Jul 2025 13:04:38 -0700
Subject: [PATCH] fix: use `pull_request_target` event as the trigger of PR
 triaging agent

GitHub workflows triggered by `pull_request` events from forked repositories do not have access to secrets by default due to security considerations.

PiperOrigin-RevId: 789011890
---
 .github/workflows/pr-triage.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-triage.yml b/.github/workflows/pr-triage.yml
index 256af86d..d380983e 100644
--- a/.github/workflows/pr-triage.yml
+++ b/.github/workflows/pr-triage.yml
@@ -1,7 +1,7 @@
 name: ADK Pull Request Triaging Agent
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, reopened, edited]
 
 jobs:
@@ -33,6 +33,6 @@ jobs:
           OWNER: 'google'
           REPO: 'adk-python'
           PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
-          INTERACTIVE: ${{ secrets.PR_TRIAGE_INTERACTIVE }}
+          INTERACTIVE: ${{ vars.PR_TRIAGE_INTERACTIVE }}
           PYTHONPATH: contributing/samples
         run: python -m adk_pr_triaging_agent.main