refactor: update conventional-commits.yml (#824)

* refactor: update conventional-commits.yml

Ensure that our workflow runs for PRs that originate from an untrusted fork.
See https://github.com/amannn/action-semantic-pull-request#event-triggers

* Update conventional-commits.yml

.github/workflows/conventional-commits.yml

@@ -1,12 +1,15 @@
 name: Verify PR title/description
 
 on:
-  pull_request:
+  pull_request_target:
     types:
       - opened
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   check:
     runs-on: ubuntu-latest