Move PR comment creation to separate workflow on:pull_request_target

Author: softworkz

.github/workflows/integration-tests.yml

@@ -144,7 +144,6 @@ jobs:
           done
           echo "Processed $conv TRX file(s)"
 
-
       - name: Publish Test Report
         if: always()
         uses: ctrf-io/github-test-reporter@v1
@@ -186,24 +185,18 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ github.token }}
 
+      - name: Save PR Number
+        run: echo "PR_NUMBER=${{ github.event.pull_request.number }}" >> $GITHUB_ENV
 
-      - name: Create PR Comment
-        if: always()
-        uses: ctrf-io/github-test-reporter@v1
-        with:
-          report-path: 'ctrf/**/*.json'
-
-          summary: true
-          pull-request: true
-          use-suite-name: true
-          update-comment: true
-          always-group-by: true
-          overwrite-comment: true
-          upload-artifact: false
+      - name: Upload PR Number as Artifact
+        run: echo $PR_NUMBER > pr_number.txt
+        shell: bash
 
-          pull-request-report: true
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
+      - name: Upload PR Number Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: pr_number
+          path: pr_number.txt
 
       - name: Summary
-        run: echo "All matrix test jobs completed."
+        run: echo "All matrix test jobs completed."

.github/workflows/pr-comment.yml

@@ -0,0 +1,58 @@
+name: Create PR Comments
+
+on:
+  workflow_run:
+    workflows: ["Tests"]
+    types: [completed]
+
+permissions:
+  contents: read
+  actions: read
+  pull-requests: write
+
+jobs:
+  pr-comment:
+    name: Post Test Result as PR comment
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Download PR number artifact
+        uses: dawidd6/action-download-artifact@v8
+        with:
+          github_token: ${{ github.token }}
+          run_id: ${{ github.event.workflow_run.id }}
+          name: pr-number
+          path: pr-number
+
+      - name: Read PR Number
+        id: read_pr_number
+        run: |
+          PR_NUMBER=$(cat pr_number/pr_number.txt)
+          echo "PR_NUMBER=$PR_NUMBER" >> $GITHUB_ENV
+
+      - name: Download CTRF artifact
+        uses: dawidd6/action-download-artifact@v8
+        with:
+          github_token: ${{ github.token }}
+          run_id: ${{ github.event.workflow_run.id }}
+          name: ctrf-report
+          path: ctrf
+
+      - name: Post PR Comment
+        if: always()
+        uses: ctrf-io/github-test-reporter@v1
+        with:
+          report-path: 'ctrf/**/*.json'
+          issue: ${{ env.PR_NUMBER }}
+
+          summary: true
+          pull-request: true
+          use-suite-name: true
+          update-comment: true
+          always-group-by: true
+          overwrite-comment: true
+          upload-artifact: false
+
+          pull-request-report: true
+        env:
+          GITHUB_TOKEN: ${{ github.token }}