docs: add doc on how to contribute to this repo

[robin-thomas]

No description provided.

[robin-thomas]

@PaulRBerg Do you know how to pass the secret GH_OAUTH_TOKEN from my forked repo to CI workflow in https://github.com/PaulRBerg/create-eth-app/blob/develop/.github/workflows/integration.yaml.

To my knowledge, that's not possible. Hence, wanted to check how do you get contributors to do this.

[PaulRBerg]

Yeah I did a little bit of research and that doesn't seem to be possible.

wanted to check how do you get contributors to do this

I thought that adding GH_OAUTH_TOKEN to your fork would make it work. But it looks like it doesn't because the CI check is still run in the context of my repository.

more research is needed to find a solution.

[robin-thomas]

I have added a question on StackOverflow: https://stackoverflow.com/questions/76975408/how-to-pass-a-secret-from-a-forked-github-repo-to-source-repo

[robin-thomas]

@PaulRBerg You can have the secret added to this repo, and since you are using pull_request and not pull_request_target event type, forked repos wont be able to access the secrets from this repo (since the CI is run in this repo anyway).

[PaulRBerg]

Thanks for your help, @robin-thomas.

I ended up removing the pull_request target event because it appears to cause a lot of trouble. Many PRs, such as yours, do not require a re-run of the integration tests because they don't touch production code.

When the production code is updated, I can manually run the integration tests in the context of the PR head branch.