[action] Use pull_request_target trigger instead to avoid codeQL check approval (#12509) (#12541)

Co-authored-by: Liu Shilong <[email protected]>

Author: mssonicbld

.github/workflows/codeql-analysis.yml

@@ -7,7 +7,7 @@ on:
     branches:
       - 'master'
       - '202[0-9][0-9][0-9]'
-  pull_request:
+  pull_request_target:
     branches:
       - 'master'
       - '202[0-9][0-9][0-9]'