ci: fix reusable workflow startup

Author: damacus

.github/workflows/conventional-commits.yml

@@ -1,14 +1,13 @@
 ---
-name: conventional-commits
+name: 'Validate PR'
 
 "on":
-  pull_request:
-    types:
-      - opened
-      - reopened
-      - edited
-      - synchronize
+  pull_request_target:
+    types: [opened, edited, reopened]
 
 jobs:
   conventional-commits:
     uses: sous-chefs/.github/.github/workflows/conventional-commits.yml@5.0.8
+    permissions:
+      pull-requests: read
+    secrets: inherit

.github/workflows/prevent-file-change.yml

@@ -1,16 +1,14 @@
 ---
-name: prevent-file-change
+name: 'Prevent file change'
 
 "on":
-  pull_request:
-    types:
-      - opened
-      - reopened
-      - edited
-      - synchronize
+  pull_request_target:
+    branches: [main]
 
 jobs:
   prevent-file-change:
     uses: sous-chefs/.github/.github/workflows/prevent-file-change.yml@5.0.8
+    permissions:
+      pull-requests: write
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}