Allow trusted Quarto workflow execution

Author: Copilot

.github/workflows/preview.yml

@@ -24,7 +24,16 @@ jobs:
       - name: Setup Quarto
         uses: quarto-dev/quarto-actions/setup@v2
 
-      - name: Render
+      - name: Setup R
+        if: ${{ !github.event.pull_request.head.repo.fork }}
+        uses: r-lib/actions/setup-r@v2
+
+      - name: Render (trusted PRs)
+        if: ${{ !github.event.pull_request.head.repo.fork }}
+        run: quarto render .
+
+      - name: Render (fork PRs without execution)
+        if: ${{ github.event.pull_request.head.repo.fork }}
         run: quarto render . --execute false
 
       - name: Deploy PR Preview

.github/workflows/publish.yaml

@@ -21,8 +21,11 @@ jobs:
       - name: Setup Quarto
         uses: quarto-dev/quarto-actions/setup@v2
 
+      - name: Setup R
+        uses: r-lib/actions/setup-r@v2
+
       - name: Render Quarto
-        run: quarto render . --execute false
+        run: quarto render .
 
       - name: Deploy 🚀
         uses: JamesIves/github-pages-deploy-action@v4