WIP: runner image in matrix build

.github/workflows/approved-for-ci-run.yml

@@ -1,20 +1,20 @@
 name: Handle `approved-for-ci-run` label
 # This workflow helps to run CI pipeline for PRs made by external contributors (from forks).
 
-on: {}
-#   pull_request_target:
-#     branches:
-#       - main
-#     types:
-#       # Default types that triggers a workflow ([1]):
-#       # - [1] https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request
-#       - opened
-#       - synchronize
-#       - reopened
-#       # Types that we wand to handle in addition to keep labels tidy:
-#       - closed
-#       # Actual magic happens here:
-#       - labeled
+on:
+  pull_request_target:
+    branches:
+      - main
+    types:
+      # Default types that triggers a workflow ([1]):
+      # - [1] https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request
+      - opened
+      - synchronize
+      - reopened
+      # Types that we wand to handle in addition to keep labels tidy:
+      - closed
+      # Actual magic happens here:
+      - labeled
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number }}