Continuation of #29.

Using pull_request_target as the trigger in workflows wont allow forks to change the workflows; meaning, new implementation audits PRs wont work - we'd need to prepare.