actions: debug pull_request_target (#551)

Author: kenherring

.github/workflows/main.yml

@@ -7,10 +7,15 @@ on:
   pull_request_target:
     branches:
       - main
+  pull_request:
+    branches:
+      - main
+    paths:
+      - .github/workflows/main.yml
   workflow_dispatch:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref }}
+  group: ${{ github.workflow }}-${{ github.head_ref }}-${{ github.event_name }}
   cancel-in-progress: true
 
 permissions:
@@ -32,8 +37,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.head_ref || github.ref_name }}
-          # ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref_name }}
+          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref_name }}
           token: ${{ secrets.MY_GITHUB_TOKEN || github.token }}
       - name: Run ShellCheck
         uses: ludeeus/action-shellcheck@2.0.0
@@ -70,9 +74,10 @@ jobs:
       PROGRESS_CFG_BASE64: ${{ secrets.PROGRESS_CFG_BASE64 }}
     steps:
       - uses: actions/checkout@v6
+        continue-on-error: true
         with:
           fetch-depth: 0
-          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.head_ref || github.ref_name }}
+          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref_name }}
       - run: ./scripts/run_test_wrapper.sh
       - run: ./scripts/sonar_test_results_merge.sh
       - name: SonarQube Scan - main
@@ -104,7 +109,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.head_ref || github.ref_name }}
+          ref: ${{ github.event_name == 'pull_request_target' && github.head_ref || github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref_name }}
       - uses: actions/download-artifact@v8
         with:
           name: package-artifact