Temporary fix for Github action (#594)

* protect files that workflows need to process secrets

* use `pull_request_target` instead of `pull_request` trigger

Author: dahagag

.github/workflows/ci.yml

@@ -1,7 +1,7 @@
 name: CI
 
 on:
-  pull_request:
+  pull_request_target:
     types:
       - opened
       - reopened

CODEOWNERS

@@ -0,0 +1,9 @@
+# Docs:
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+# https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/about-protected-branches#require-pull-request-reviews-before-merging
+
+/makefile           @ascoderu/lokole-dev
+/.github.env.gpg    @ascoderu/lokole-dev
+/docker-compose.yml @ascoderu/lokole-dev
+/docker/            @ascoderu/lokole-dev
+/.github            @ascoderu/lokole-dev