Run coverage on PRs only

Author: msaroufim

.github/workflows/coverage.yml

@@ -10,23 +10,16 @@ jobs:
   test:
     name: Run tests & display coverage
     runs-on: ubuntu-latest
+    # This ensures it ONLY runs on PR events, not pushes to main
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'
     permissions:
-      # Still include these for any other actions that might use GITHUB_TOKEN
       pull-requests: write
       contents: write
       actions: read
     steps:
-      # DO NOT run actions/checkout here, for security reasons
-      # For details, refer to https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
-      
       - name: Post comment
         uses: py-cov-action/python-coverage-comment-action@v3
         with:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_PR_RUN_ID: ${{ github.event.workflow_run.id }}
-          # Update these if you changed the default values:
-          # COMMENT_ARTIFACT_NAME: python-coverage-comment-action
-          # COMMENT_FILENAME: python-coverage-comment-action.txt
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}