chore(ci): restrict scorecards to codecov/codecov-action (#1512)

.github/workflows/scorecards-analysis.yml

@@ -12,6 +12,7 @@ permissions: read-all
 
 jobs:
   analysis:
+    if: github.repository == 'codecov/codecov-action'
     name: Scorecards analysis
     runs-on: ubuntu-latest
     permissions:

dist/index.js

@@ -32351,12 +32351,12 @@ const isPullRequestFromFork = () => {
     return (baseLabel.split(':')[0] !== headLabel.split(':')[0]);
 };
 const getToken = () => buildExec_awaiter(void 0, void 0, void 0, function* () {
-    if (isPullRequestFromFork()) {
+    let token = core.getInput('token');
+    if (!token && isPullRequestFromFork()) {
         core.info('==> Fork detected, tokenless uploading used');
         process.env['TOKENLESS'] = context.payload.pull_request.head.label;
         return Promise.resolve('');
     }
-    let token = core.getInput('token');
     let url = core.getInput('url');
     const useOIDC = isTrue(core.getInput('use_oidc'));
     if (useOIDC) {