Does this actually work on `pull_request`?

[matthiasbeyer]

Hi.

This action needs the GITHUB_TOKEN, but a pull_request action does not have access to it, does it?

So does this actually work?
I would guess that pull_request_target would be the way, but in my tests it looked like this action then annotates stuff that is actually fixed in the diff...