Fix workflow for pull_request_target checkout (#369)

Author: deep-splunk

.github/workflows/ci_build_test.yaml

@@ -30,7 +30,11 @@ jobs:
     needs:
       - workflow_approval
     steps:
-      - uses: actions/checkout@v3
+      - name:  Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: ${{github.event.pull_request.head.sha}}
+          repository: ${{github.event.pull_request.head.repo.full_name}}
       - name: run fossa anlyze and create report
         run: |
           curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash
@@ -56,7 +60,11 @@ jobs:
     name: security-sast-semgrep
     if: github.actor != 'dependabot[bot]'
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: ${{github.event.pull_request.head.sha}}
+          repository: ${{github.event.pull_request.head.repo.full_name}}
       - name: Semgrep
         id: semgrep
         uses: returntocorp/semgrep-action@v1
@@ -71,6 +79,9 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          ref: ${{github.event.pull_request.head.sha}}
+          repository: ${{github.event.pull_request.head.repo.full_name}}
 
       - name: Get maven dependencies
         run: |
@@ -139,6 +150,9 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          ref: ${{github.event.pull_request.head.sha}}
+          repository: ${{github.event.pull_request.head.repo.full_name}}
 
       - name: Install Splunk
         run: |
@@ -333,4 +347,4 @@ jobs:
         if: failure()
         with:
           name: splunk-events-${{ matrix.kafka_version }}
-          path: events.txt
+          path: events.txt