Update workflows

.github/workflows/repo_pr_await_changes.yml → .github/workflows/pr_await_changes.yml

@@ -4,7 +4,7 @@ name: "Pull Request Changes"
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened]
+    types: [opened, synchronize, reopened, closed]
 
 permissions: {}
 
@@ -14,4 +14,4 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - run: echo "Changes detected."
+      - run: echo "Child workflows triggered."

.github/workflows/sec_snyk.yml → .github/workflows/pr_snyk.yml

@@ -1,14 +1,8 @@
 name: "Snyk"
 
-# This workflow will run after a pull request has been approved, and is
-# triggered as a result of the "Pull Request Approval" workflow succeeding.
-# By being executed in this manner, the workflow will have access to the
-# environment variables of the origin repository, allowing builds to
-# successfully run for forked pull requests without exposing secrets.
-
 on:
   workflow_run:
-    workflows: ["Pull Request Approval"]
+    workflows: ["Pull Request Changes"]
     types:
       - completed
 
@@ -23,8 +17,6 @@ jobs:
     name: "Scan"
     runs-on: ubuntu-latest
 
-    if: github.event.workflow_run.conclusion == 'success' && contains(github.event.issue.labels.*.name, 'Approved')
-
     steps:
       - uses: shivammathur/setup-php@v2
         with:
@@ -35,6 +27,9 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - uses: actions/checkout@v3
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - run: composer install --no-progress