Merge pull request #4108 from Blargian/trademark_update_2

Legal: run only on pull-request-target for addendum workflow

Author: Blargian

.github/workflows/trademark-cla-approval.yml

@@ -7,8 +7,6 @@ on:
         description: 'PR number to approve CLA for'
         required: true
         type: string
-  pull_request:
-    types: [labeled]
   pull_request_target:
     types: [labeled]
 
@@ -45,7 +43,7 @@ jobs:
             // Determine PR number
             if (context.eventName === 'workflow_dispatch') {
               prNumber = parseInt('${{ github.event.inputs.pr_number }}');
-            } else if (context.eventName === 'pull_request' || context.eventName === 'pull_request_target') {
+            } else if (context.eventName === 'pull_request_target') {
               prNumber = context.payload.pull_request.number;
             } else {
               return;

.github/workflows/trademark-cla-notice.yml

@@ -3,8 +3,8 @@ name: Trademark CLA Notice
 on:
   pull_request_target:
     types: [opened, edited, synchronize]
-  pull_request_target:
-    types: [opened, edited, synchronize]
+  issue_comment:
+    types: [created]
 
 # Set repository-level permissions
 permissions: write-all
@@ -33,7 +33,7 @@ jobs:
 
       - name: Check if docs changed
         id: docs-changed
-        if: github.event_name == 'pull_request' || github.event_name == 'pull_request_target'
+        if: github.event_name == 'pull_request_target'
         run: |
           changed_files=$(git diff --name-only ${{ github.event.pull_request.base.sha}} ${{ github.event.pull_request.head.sha}})
           
@@ -99,14 +99,14 @@ jobs:
             return null;
 
       - name: Post CLA comment and block merge
-        if: (github.event_name == 'pull_request' || github.event_name == 'pull_request_target') && steps.docs-changed.outputs.requires_cla == 'true'
+        if: github.event_name == 'pull_request_target' && steps.docs-changed.outputs.requires_cla == 'true'
         uses: actions/github-script@v7
         with:
           github-token: ${{ steps.generate-token.outputs.token || secrets.GITHUB_TOKEN }}
           script: |
             let prNumber, prAuthor;
             
-            if (context.eventName == 'pull_request' || context.eventName == 'pull_request_target') {
+            if (context.eventName == 'pull_request_target') {
               prNumber = context.issue.number;
               prAuthor = '${{ github.event.pull_request.user.login }}';
             }
@@ -147,7 +147,7 @@ jobs:
                 comment.body.includes('CLA Agreement Required - MERGE BLOCKED')
               );
             
-              if (!existingClaComment && (context.eventName === 'pull_request' || context.eventName === 'pull_request_target')) {
+              if (!existingClaComment && context.eventName === 'pull_request_target') {
                 const claText = '# Trademark License Addendum\n\n' +
                   'Merging of this pull request is temporarily blocked. Please \n' +
                   'read and agree to the Trademark License Addendum below to \n' +