Harden Windows System Probe named pipe #9998

	---
	name: Handle External Contributor PRs

	on:
	# run in the context of the base branch, so that it still works in PR from forks
	pull_request_target:
	types: [opened, reopened]

	permissions: {}

	jobs:
	external-contributor-prs:
	name: Handle Fork PRs
	runs-on: ubuntu-latest
	permissions:
	pull-requests: write
	if: github.event.pull_request.head.repo.full_name != github.repository
	steps:
	- name: Checkout repository
	uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
	with:
	ref: main
	fetch-depth: 0
	persist-credentials: false
	- name: Setup python
	uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
	with:
	python-version: 3.11
	cache: 'pip'
	cache-dependency-path: '*/requirements.txt'
	- name: Install dependencies
	run: pip install -r requirements.txt -r tasks/requirements.txt
	- name: Set label on external contributor PRs
	run: \|
	inv -e github.handle-community-pr --repo="$GH_REPO" --pr-id="$NUMBER" --labels="$LABELS"
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SLACK_API_TOKEN: ${{ secrets.SLACK_DATADOG_AGENT_BOT_TOKEN }}
	GH_REPO: ${{ github.repository }}
	NUMBER: ${{ github.event.number }}
	# labels is a comma-separated list of tags
	LABELS: community

Provide feedback