use pull_request_target

Author: wgtmac

.github/workflows/cpp-linter.yml

@@ -18,7 +18,8 @@
 name: C++ Linter
 
 on:
-  pull_request:
+  pull_request_target:
+    types: [opened, synchronize]
     paths-ignore:
       - '.github/**'
       - 'ci/**'
@@ -29,8 +30,6 @@ on:
 jobs:
   cpp-linter:
     runs-on: ubuntu-24.04
-    permissions:
-      pull-requests: write
     steps:
       - uses: actions/checkout@v4
       - name: Run build