Improve evaluate-pr-tests workflow: pull_request_target, access gating, security docs#34678

Open

PureWeen wants to merge 13 commits intomainfrom

fix/evaluate-tests-fork-support

Commits on Mar 26, 2026

Switch evaluate-pr-tests to pull_request_target for fork PR support

github-actions[bot]
and
Copilot
committed
Gate workflow_dispatch checkout to PRs from authors with write access

github-actions[bot]
and
Copilot
committed
Move write-access gate into Checkout-GhAwPr.ps1 for reuse

github-actions[bot]
and
Copilot
committed
Skip workflow_dispatch checkout for fork PRs

github-actions[bot]
and
Copilot
committed
Restore entire .github/ from base branch instead of individual paths

github-actions[bot]
and
Copilot
committed
Use merge instead of restore for workflow_dispatch checkout

github-actions[bot]
and
Copilot
committed

Commits on Mar 27, 2026

Commits on Mar 28, 2026

Add dry-run mode and noop guidance to evaluate-tests workflow

github-actions[bot]
and
Copilot
committed