[bsrc] M5 security test - PRT mutable tag supply chain

[q2e0qviffj]

bsrc security test - verifying pull_request_target with mutable-tag 3rd party action passes Jenkins secret (M5)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}