Merge branch 'octo-sts:main' into retry

.github/chainguard/use-action.sts.yaml

@@ -1,8 +1,7 @@
 issuer: https://token.actions.githubusercontent.com
-subject: repo:octo-sts/action:ref:refs/heads/main
+subject: repo:octo-sts/action:pull_request
 claim_pattern:
-  job_workflow_ref: octo-sts/action/.github/workflows/use-action.yaml@refs/heads/main
+  workflow_ref: octo-sts/action/\.github/workflows/use-action\.yaml@refs/heads/main
 
 permissions:
   contents: read
-  issues: write

.github/workflows/use-action.yaml

@@ -1,8 +1,7 @@
 name: Use Action
 
 on:
-  workflow_dispatch:
-  push:
+  pull_request_target:
     branches: ['main']
 
 permissions:
@@ -23,4 +22,4 @@ jobs:
       - uses: actions/checkout@v4
       - env:
           GITHUB_TOKEN: ${{ steps.octo-sts.outputs.token }}
-        run: gh issue create --title "Use Action" --body "This issue was created using an Octo STS token"
+        run: gh repo list | grep octo-sts