diff --git a/.github/workflows/build_pr.yml b/.github/workflows/build_pr.yml
index ed222b9..49161fe 100644
--- a/.github/workflows/build_pr.yml
+++ b/.github/workflows/build_pr.yml
@@ -2,47 +2,48 @@ name: build_pr
 
 on:
   pull_request_target:
-    branches: [ master ]
+    branches: [master]
 
 jobs:
   build_pr:
     if: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
     runs-on: ubuntu-latest
     steps:
-    - name: Checkout this repo
-      uses: actions/checkout@v4
-      with:
-        submodules: recursive
-        ref: ${{ github.event.pull_request.head.ref }}
-        repository: ${{ github.event.pull_request.head.repo.full_name }}
-    - name: Checkout baserom
-      uses: actions/checkout@v4
-      with:
-        repository: mkst/conker-private
-        token: ${{ secrets.PRIVATE_REPO_ACCESS }}
-        path: baserom
-    - name: Decrypt baserom
-      run: echo ${{ secrets.CONKER_BASEROM_US }} | openssl enc -d -aes-256-cbc -pass stdin -pbkdf2 -in baserom/baserom.us.z64.aes -out baserom.us.z64
+      - name: Checkout this repo
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - name: Checkout baserom
+        uses: actions/checkout@v4
+        with:
+          repository: mkst/conker-private
+          token: ${{ secrets.PRIVATE_REPO_ACCESS }}
+          path: baserom
+          persist-credentials: false
+      - name: Decrypt baserom
+        run: echo ${{ secrets.CONKER_BASEROM_US }} | openssl enc -d -aes-256-cbc -pass stdin -pbkdf2 -in baserom/baserom.us.z64.aes -out baserom.us.z64
 
-    - name: Perform make extract (rom)
-      uses: docker://ghcr.io/mkst/conker:latest
-      with:
-        args: make extract
+      - name: Perform make extract (rom)
+        uses: docker://ghcr.io/mkst/conker:latest
+        with:
+          args: make extract
 
-    - name: Perform make extract (code)
-      uses: docker://ghcr.io/mkst/conker:latest
-      with:
-        args: sh -c "cd conker && make extract"
-    - name: Perform make (code)
-      uses: docker://ghcr.io/mkst/conker:latest
-      with:
-        args: sh -c "cd conker && make --jobs"
-    - name: Perform make replace
-      uses: docker://ghcr.io/mkst/conker:latest
-      with:
-        args: sh -c "cd conker && make replace"
+      - name: Perform make extract (code)
+        uses: docker://ghcr.io/mkst/conker:latest
+        with:
+          args: sh -c "cd conker && make extract"
+      - name: Perform make (code)
+        uses: docker://ghcr.io/mkst/conker:latest
+        with:
+          args: sh -c "cd conker && make --jobs"
+      - name: Perform make replace
+        uses: docker://ghcr.io/mkst/conker:latest
+        with:
+          args: sh -c "cd conker && make replace"
 
-    - name: Perform make
-      uses: docker://ghcr.io/mkst/conker:latest
-      with:
-        args: make --jobs
+      - name: Perform make
+        uses: docker://ghcr.io/mkst/conker:latest
+        with:
+          args: make --jobs