fixing perms

.github/workflows/check-for-build-warnings.yml

@@ -1,7 +1,7 @@
 name: 'OPS status checker'
 
 on: 
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened]
 
 permissions:

.github/workflows/dependency-review.yml

@@ -7,7 +7,7 @@
 #
 # Source repository: https://github.com/actions/dependency-review-action
 name: 'Dependency Review'
-on: [pull_request_target]
+on: [pull_request]
 
 permissions:
   contents: read

.github/workflows/do-not-merge-label-check.yml

@@ -5,7 +5,7 @@
 
 name: "Check labels that prevent merge"
 on:
-  pull_request_target:
+  pull_request:
     branches: [main]
     types: [labeled, unlabeled]
 

.github/workflows/docs-verifier.yml

@@ -1,5 +1,5 @@
 name: MSDocs build verifier
-on: pull_request_target
+on: pull_request
 
 permissions:
   contents: read

.github/workflows/live-protection.yml

@@ -1,4 +1,4 @@
-on: [pull_request_target]
+on: [pull_request]
 
 permissions:
   contents: read

.github/workflows/markdownlint.yml

@@ -9,7 +9,7 @@ on:
       - ".markdownlint-cli2.jsonc"
       - ".github/workflows/markdownlint.yml"
       - ".github/workflows/markdownlint-problem-matcher.json"
-  pull_request_target:
+  pull_request:
     paths:
       - "**/*.md"
       - ".markdownlint-cli2.jsonc"

.github/workflows/rebase-needed.yml

@@ -2,7 +2,7 @@ name: "rebase required"
 
 on:
   push:
-  pull_request_target:
+  pull_request:
     types: [synchronize]
 
 permissions:

.github/workflows/snippets5000.yml

@@ -3,7 +3,7 @@ name: 'Snippets 5000'
 # Controls when the action will run. Triggers the workflow on push or pull request
 # events on the main branch only.
 on:
-  pull_request_target:
+  pull_request:
     branches: [ main ]
     types: [opened, synchronize, reopened]
   workflow_dispatch: