Handle runs from forks (#512)

.github/workflows/tests.yml

@@ -4,10 +4,11 @@ name: "AzOps - Tests"
 on:
   workflow_dispatch:
   
-  pull_request:
+  pull_request_target:
+    branches: [main]
     paths:
       - "src/**"
-  
+
 permissions:
       id-token: write
       contents: write
@@ -30,6 +31,8 @@ jobs:
       - name: "Checkout"
         uses: actions/checkout@v2
         with:
+          ref: ${{github.event.pull_request.head.ref}}
+          repository: ${{github.event.pull_request.head.repo.full_name}}
           fetch-depth: 0
 
       # Dependencies