diff --git a/.github/workflows/cve_checks.yml b/.github/workflows/cve_checks.yml
index 027296643..3393d4f9e 100644
--- a/.github/workflows/cve_checks.yml
+++ b/.github/workflows/cve_checks.yml
@@ -1,6 +1,6 @@
 name: "Infra: CVE checks"
 on:
-  pull_request_target:
+  pull_request:
   push:
     branches: [ "main" ]
   workflow_dispatch: