diff --git a/.github/workflows/eval-check.yml b/.github/workflows/eval-check.yml
index f93fafa..4c23f72 100644
--- a/.github/workflows/eval-check.yml
+++ b/.github/workflows/eval-check.yml
@@ -3,7 +3,8 @@ name: "Eval"
 on:
   push:
     branches: 'master'
-  pull_request_target:
+  pull_request:
+    branches: 'master'
 
 jobs:
   check:
@@ -19,4 +20,4 @@ jobs:
           name: wrangler
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
       - name: Check
-        run: nix flake check -L
\ No newline at end of file
+        run: nix flake check -L
diff --git a/.github/workflows/eval-checks.yml b/.github/workflows/eval-checks.yml
index 04ca4f8..d4c732c 100644
--- a/.github/workflows/eval-checks.yml
+++ b/.github/workflows/eval-checks.yml
@@ -3,7 +3,8 @@ name: "Eval (Checks)"
 on:
   push:
     branches: 'master'
-  pull_request_target:
+  pull_request:
+    branches: 'master'
 
 jobs:
   wrangler:
@@ -19,4 +20,4 @@ jobs:
           name: wrangler
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
       - name: Build
-        run: nix build .#checks.x86_64-linux.wrangler
\ No newline at end of file
+        run: nix build .#checks.x86_64-linux.wrangler
diff --git a/.github/workflows/eval-devshells.yml b/.github/workflows/eval-devshells.yml
index f611c84..b37019f 100644
--- a/.github/workflows/eval-devshells.yml
+++ b/.github/workflows/eval-devshells.yml
@@ -3,7 +3,8 @@ name: "Eval (devShells)"
 on:
   push:
     branches: 'master'
-  pull_request_target:
+  pull_request:
+    branches: 'master'
 
 jobs:
   wrangler:
@@ -15,4 +16,4 @@ jobs:
         with:
           nix_path: nixpkgs=channel:nixpkgs-unstable
       - name: Build
-        run: nix build .#devShells.x86_64-linux.default
\ No newline at end of file
+        run: nix build .#devShells.x86_64-linux.default
diff --git a/.github/workflows/eval-format.yml b/.github/workflows/eval-format.yml
index d9e7320..776ad78 100644
--- a/.github/workflows/eval-format.yml
+++ b/.github/workflows/eval-format.yml
@@ -3,7 +3,8 @@ name: "Eval"
 on:
   push:
     branches: 'master'
-  pull_request_target:
+  pull_request:
+    branches: 'master'
 
 jobs:
   format:
@@ -15,4 +16,4 @@ jobs:
         with:
           nix_path: nixpkgs=channel:nixpkgs-unstable
       - name: Check formatting
-        run: nix fmt -- -c .
\ No newline at end of file
+        run: nix fmt -- -c .
diff --git a/.github/workflows/eval-packages.yml b/.github/workflows/eval-packages.yml
index 4d93551..8af1f23 100644
--- a/.github/workflows/eval-packages.yml
+++ b/.github/workflows/eval-packages.yml
@@ -3,7 +3,8 @@ name: "Eval (Packages)"
 on:
   push:
     branches: 'master'
-  pull_request_target:
+  pull_request:
+    branches: 'master'
 
 jobs:
   wrangler:
@@ -19,4 +20,4 @@ jobs:
           name: wrangler
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
       - name: Build
-        run: nix build .#packages.x86_64-linux.wrangler
\ No newline at end of file
+        run: nix build .#packages.x86_64-linux.wrangler