Merge pull request #34 from sgibson91/fix-fork-warn-workflow

fix: update fork warn workflow

Author: sgibson91

.github/workflows/pr-comment.yaml .github/workflows/fork-warn.yaml.github/workflows/pr-comment.yaml renamed to .github/workflows/fork-warn.yaml

@@ -1,16 +1,17 @@
 name: Warn about PRs from forks via comment
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - main
     types:
       - opened
+      - reopened
 
 jobs:
   warn-forks:
     runs-on: ubuntu-latest
-    if: github.repository != 'the-turing-way/teams-as-code'
+    if: github.event.pull_request_target.head.repo.full_name != 'the-turing-way/teams-as-code'
     permissions:
       issues: write
       pull-requests: write

.github/workflows/plan-and-apply.yaml

@@ -16,16 +16,19 @@ env:
 
 concurrency:
   # Only run one tf job at a time to avoid conflicts and state lock
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}
   cancel-in-progress: false
 
 jobs:
   plan-apply:
+    runs-on: ubuntu-latest
     # Provide GITHUB_TOKEN enough permissions to post a comment to a PR
     permissions:
       issues: write
       pull-requests: write
-    runs-on: ubuntu-latest
+    # Secrets for this workflow are in an environment with extra restrictions
+    environment: tf-env
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6