[build] this does need pull_request_target with PAT with no checkout

Author: titusfortner

.github/workflows/pr-labeler.yml

@@ -2,7 +2,7 @@
 name: Label pull requests based on file paths
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened]
 
 permissions:
@@ -13,8 +13,6 @@ jobs:
   label:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
       - name: Auto label Pull Requests
         uses: actions/labeler@v5
         with: