Recommendation on workflow setup for PRs

[tpadioleau]

Hi, I would like to know if you have any recommendation on how to setup this action to make it work with pull requests from a fork ?

For example, in my repository it always fail with "*** is an organization. License key is required.", see here. I added the key both to my organization and the repo. My configuration is the following:

  gitleaks-scan:
    name: gitleaks
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
        with:
          fetch-depth: 0
      - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7  # v2.3.9
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
          GITLEAKS_LICENSE: ${{secrets.GITLEAKS_LICENSE}}