Yes. This topic comes agian and again.
Pull request with forked repo for workflow build sometime need additional operation. Current design `secrets` not works on forked PR. As the workaround, we have to patch the token in the public place.
Please re-consider forked only `secrets`.
We really care about our customers feedback. Could you please share your idea in the Feedback form for GitHub Actions ? Thank you for help us build a better Github Actions.