The permissions when running forked PRs are downgraded to read so safe output steps are guaranteed to fail.