use pull_request_target

Author: Sarthak-Shaha

.github/workflows/01-CLA-Assistant.yml

@@ -3,11 +3,12 @@ name: CLA validation
 on:
   issue_comment:
     types: [created]
-  pull_request:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
 
 permissions:
   actions: write
-  contents: read
+  contents: read 
   pull-requests: write
   statuses: write
 
@@ -19,16 +20,16 @@ jobs:
         uses: actions/create-github-app-token@v2
         id: app-token
         with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          app-id: ${{ secrets.SILABSIN_CLA_BOT_APP_ID }}
+          private-key: ${{ secrets.SILABSIN_CLA_BOT_APP_PRIVATE_KEY }}
           owner: SiliconLabsInternal
           repositories: contributor-license-agreements
 
       - name: Mask generated token
         run: echo "::add-mask::${{ steps.app-token.outputs.token }}"
 
       - name: "CLA Assistant"
-        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request'
+        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request_target'
         uses: SiliconLabsSoftware/action-cla-assistant@silabs_flavour_v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -42,4 +43,4 @@ jobs:
           remote-organization-name: "SiliconLabsInternal"
           remote-repository-name: "contributor-license-agreements"
           create-file-commit-message: "Created the CLA database file. CLA Assistant Lite bot created this file."
-          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"
+          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"