fix: support workflow_run events for github status

ensures commit statuses are posted to the correct sha when the action
is triggered from a workflow_run context (e.g., secure fork pr workflows)

applies the same fix as ipshipyard/ipfs-deploy-action#37

Author: lidel

CHANGELOG.md

@@ -6,8 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## Unreleased
+
+### Added
 - Added support for Gandi DNS provider
 
+### Fixed
+- Support `workflow_run` events for correct GitHub commit status (e.g., secure fork PR workflows)
+
 ## [0.1.0] - 2025-02-20
 
 - Initial release of of the dnslink-action

action.yml

@@ -162,10 +162,18 @@ runs:
         script: |
           const cid = '${{ inputs.cid }}';
 
-          // For PR events, we need to use the head SHA
-          const sha = context.eventName === 'pull_request'
-            ? context.payload.pull_request.head.sha
-            : context.sha;
+          // Determine the correct SHA based on the event type
+          let sha;
+          if (context.eventName === 'workflow_run') {
+            // For workflow_run events triggered by PRs, use the PR's head SHA
+            sha = context.payload.workflow_run.head_sha;
+          } else if (context.eventName === 'pull_request' || context.eventName === 'pull_request_target') {
+            // For PR events, use the head SHA
+            sha = context.payload.pull_request.head.sha;
+          } else {
+            // For push events, use the commit SHA
+            sha = context.sha;
+          }
 
           await github.rest.repos.createCommitStatus({
             owner: context.repo.owner,