Would you enable this workflow trigger?

Situation

An AI suggests adding a workflow trigger to run tests on pull requests from forks.

Environment

Public open-source repository with GitHub Actions running on self-hosted runners with access to internal network.

Select suspicious lines in the terminal to flag them before submitting your verdict.

pending review

name: External PR Tests

on:
  pull_request_target:
    types: [opened, synchronize]

jobs:
  test:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - run: make test
      - run: make deploy-staging