From 216c56530812a7c9118f65927ec3e6e848fa75fb Mon Sep 17 00:00:00 2001
From: Daan Hoogland <daan@onecht.net>
Date: Tue, 9 May 2023 18:39:10 +0200
Subject: [PATCH] replace pull_request_target with pull_request

---
 .github/workflows/sonar-check.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/sonar-check.yml b/.github/workflows/sonar-check.yml
index 2bfdaf0a65f..e473ac21ee4 100644
--- a/.github/workflows/sonar-check.yml
+++ b/.github/workflows/sonar-check.yml
@@ -17,10 +17,12 @@
 
 name: Sonar Quality Check
 
-on: [pull_request_target]
+on: [pull_request]
 
 permissions:
-  contents: read
+ dd contents: read
+  contents: read # to fetch code (actions/checkout)
+  pull-requests: write # for sonar to comment on pull-request
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}