ci: deploy skip on fork

Co-authored-by: Copilot <copilot@github.com>

Author: andykenward

.github/workflows/deploy.yml

@@ -2,18 +2,26 @@
 
 name: deploy
 on:
-  workflow_run:
-    workflows:
-      - test
-    types:
-      - completed
+  pull_request:
+    branches:
+      - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
 
 jobs:
+  fork:
+    if: ${{ github.event.pull_request.head.repo.fork }}
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+    steps:
+      - name: Fork PR notice
+        run: echo 'Fork pull request detected; skipping deploy job that requires repository secrets.'
+
   deploy:
-    if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.head_branch != 'main' }}
+    if: ${{ !github.event.pull_request.head.repo.fork }}
     permissions:
       actions: read
       contents: read
@@ -22,19 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - if: github.event_name == 'workflow_run'
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
-        with:
-          repository: ${{ github.event.workflow_run.head_repository.full_name }}
-          ref: ${{ github.event.workflow_run.head_sha }}
-      - if: github.event_name != 'workflow_run'
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
-      - name: Get PR number
-        run: |
-          echo "PR Number: ${{ github.event.number }}"
-      - name: Get PR number other
-        run: |
-          echo "PR Number: ${{ github.event.pull_request.number }}"
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
       - id: 'cloudflare-pages'
         uses: ./
         with: