Change init-preview-db workflow trigger to pull_request_target
          #2619
        
          
      
  Add this suggestion to a batch that can be applied as a single commit.
  This suggestion is invalid because no changes were made to the code.
  Suggestions cannot be applied while the pull request is closed.
  Suggestions cannot be applied while viewing a subset of changes.
  Only one suggestion per line can be applied in a batch.
  Add this suggestion to a batch that can be applied as a single commit.
  Applying suggestions on deleted lines is not supported.
  You must change the existing code in this line in order to create a valid suggestion.
  Outdated suggestions cannot be applied.
  This suggestion has been applied or marked resolved.
  Suggestions cannot be applied from pending reviews.
  Suggestions cannot be applied on multi-line comments.
  Suggestions cannot be applied while the pull request is queued to merge.
  Suggestion cannot be applied right now. Please check back later.
  
    
  
    
Closes #2618
Description
An event triggers a GitHub action workflow, it could be when a PR is created or closed, a commit has been pushed, or a new release.
In our case, we've the
pull_request:closedtrigger that start a workflow when a pull request is closed. It doesn't allow write-access to the repo or read-access to the secrets.Since it prevents reading the secrets, the workflow for updating the preview DB fails because it needs to read the
PREVIEW_DB_KEYsecret key.There's another trigger called
pull_request_target:closedthat allow a PR executed workflow to read the secrets.It also makes the workflow run only when a PR is merged.
Solution
Update the trigger to be
pull_request_target.