Github disables secrets for actions triggered from pr's. But users can commit an action that runs on their pr.