GitHub does not share the Codacy API token (secret) with the action if the action is running against a PR from a forked repo.