From 459ebfd38e9b3da6aae14b9489cfa1f7ce01cf37 Mon Sep 17 00:00:00 2001
From: Marco Hofstetter <marco.hofstetter@isovalent.com>
Date: Mon, 6 Jan 2025 10:38:49 +0100
Subject: [PATCH] github: on pull_request instead of pull_request_target

---
 .github/workflows/build-envoy-image-ci.yaml     | 2 +-
 .github/workflows/ci-check-format.yaml          | 2 +-
 .github/workflows/ci-tests.yaml                 | 2 +-
 .github/workflows/cilium-integration-tests.yaml | 7 +++----
 4 files changed, 6 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build-envoy-image-ci.yaml b/.github/workflows/build-envoy-image-ci.yaml
index 199921090..6a3d48dce 100644
--- a/.github/workflows/build-envoy-image-ci.yaml
+++ b/.github/workflows/build-envoy-image-ci.yaml
@@ -1,6 +1,6 @@
 name: CI Build & Push
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened]
 
 permissions:
diff --git a/.github/workflows/ci-check-format.yaml b/.github/workflows/ci-check-format.yaml
index b78e63d06..bfb6e4040 100644
--- a/.github/workflows/ci-check-format.yaml
+++ b/.github/workflows/ci-check-format.yaml
@@ -1,6 +1,6 @@
 name: CI check format
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened]
 
 # By specifying the access of one of the scopes, all of those that are not specified are set to 'none'.
diff --git a/.github/workflows/ci-tests.yaml b/.github/workflows/ci-tests.yaml
index 150e9f6b1..2b255b46b 100644
--- a/.github/workflows/ci-tests.yaml
+++ b/.github/workflows/ci-tests.yaml
@@ -1,6 +1,6 @@
 name: CI run integration tests
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened]
 
 # By specifying the access of one of the scopes, all of those that are not specified are set to 'none'.
diff --git a/.github/workflows/cilium-integration-tests.yaml b/.github/workflows/cilium-integration-tests.yaml
index 8cef2fd7d..c5d9eed45 100644
--- a/.github/workflows/cilium-integration-tests.yaml
+++ b/.github/workflows/cilium-integration-tests.yaml
@@ -3,7 +3,7 @@ on:
   push:
     branches:
       - main
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - reopened
@@ -79,8 +79,8 @@ jobs:
         uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
         with:
           version: ${{ env.KIND_VERSION }}
-          config: '.github/kind-config.yaml'
-          cluster_name: 'kind'
+          config: ".github/kind-config.yaml"
+          cluster_name: "kind"
 
       - name: Patch Cilium Agent Dockerfile
         shell: bash
@@ -167,7 +167,6 @@ jobs:
         shell: bash
         run: cilium sysdump --output-filename cilium-integration-test-sysdump
 
-
       - name: Upload Cilium system dump
         if: failure()
         uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0