Update README.md #24

	name: Run tests from fork
	on:
	pull_request_target:
	types: [opened, synchronize]
	jobs:
	test_secret:
	runs-on: ubuntu-latest
	steps:
	- name: Get User Permission
	id: checkAccess
	uses: actions-cool/check-user-permission@v2
	with:
	require: write
	username: ${{ github.triggering_actor }}
	env:
	TEST_SECRET: ${{ secrets.TEST_SECRET }}
	NOT_SECRET: "not a secret"
	- name: Check User Permission.
	if: steps.checkAccess.outputs.require-result == 'false'
	run: \|
	echo "${{ github.triggering_actor }} does not have permissions on this repo."
	echo "Current permission level is ${{ steps.checkAccess.outputs.user-permission }}"
	echo "Job originally triggered by ${{ github.actor }}"
	exit 1
	- name: Checkout code
	uses: actions/checkout@v3
	with:
	ref: ${{ github.event.pull_request.head.sha }} # This is dangerous without the first access check
	- name: Run tests
	run: \|
	echo "here we run tests"
	echo "secret is: ${TEST_SECRET}"
	echo "not secret is: ${NOT_SECRET}"

Provide feedback