From e6d991ea47d1258043c056b682fda66aee9bc505 Mon Sep 17 00:00:00 2001
From: Marcos Sevilla <marcossevilla14@gmail.com>
Date: Wed, 18 Feb 2026 09:33:48 +0100
Subject: [PATCH] fix(ci): code review read-only for external contributors

---
 .github/workflows/claude_code_review.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/claude_code_review.yaml b/.github/workflows/claude_code_review.yaml
index 26b267c1f..9be74340a 100644
--- a/.github/workflows/claude_code_review.yaml
+++ b/.github/workflows/claude_code_review.yaml
@@ -1,7 +1,7 @@
 name: claude_code_review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, ready_for_review, reopened]
 
 jobs:
@@ -17,6 +17,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/merge
           fetch-depth: 1
 
       - name: Run Claude Code Review