check that!

.github/workflows/preview.yml

@@ -6,8 +6,7 @@ env:
 on:
   issue_comment:
     types: [created]
-  pull_request:
-  push:
+  pull_request_target:
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -34,6 +33,8 @@ jobs:
       - name: Checkout PR (pull_request)
         uses: actions/checkout@v2
         if: github.event_name == 'pull_request'
+        with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/head
 
       - run: npm i -g [email protected]
       - uses: actions/setup-node@v4