🩹 [Patch]: Update permissions in workflows and adjust pull request trigger for Auto-Release

Author: MariusStorhaug

.github/workflows/Action-Test.yml

@@ -20,7 +20,6 @@ concurrency:
 
 permissions:
   contents: read # to checkout the repo
-  statuses: write # to create commit status
 
 jobs:
   UploadArtifact:
@@ -45,6 +44,9 @@ jobs:
     name: Action-Test - [Default]
     runs-on: ubuntu-latest
     needs: UploadArtifact
+    permissions:
+      contents: read
+      statuses: write # to create commit status from linter
     steps:
       - name: Checkout repo
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -78,7 +80,6 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-
       - name: Action-Test
         uses: ./
         with:

.github/workflows/Auto-Release.yml

@@ -3,7 +3,7 @@ name: Auto-Release
 run-name: "Auto-Release - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
 on:
-  pull_request_target:
+  pull_request:
     branches:
       - main
     types:
@@ -27,6 +27,8 @@ jobs:
     steps:
       - name: Checkout Code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
 
       - name: Auto-Release
         uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1.9.5

action.yml

@@ -19,7 +19,7 @@ runs:
   using: composite
   steps:
     - name: Install-PSModuleHelpers
-      uses: PSModule/Install-PSModuleHelpers@v1
+      uses: PSModule/Install-PSModuleHelpers@d60d63e4be477d1ca0c67c6085101fb109bce8f1 # v1.0.6
 
     - name: Document-PSModule
       shell: pwsh