From 6420a682edc5821a254462f21a522bad0a9af450 Mon Sep 17 00:00:00 2001
From: Tamara Boehm <tamara.boehm@sap.com>
Date: Wed, 16 Sep 2026 08:05:55 +0200
Subject: [PATCH] fix: use pull_request to allow to run workflow on PRs from
 forks

---
 .github/workflows/tests-workflow.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/tests-workflow.yml b/.github/workflows/tests-workflow.yml
index 194da9124..6c5eccd0f 100644
--- a/.github/workflows/tests-workflow.yml
+++ b/.github/workflows/tests-workflow.yml
@@ -1,6 +1,6 @@
 name: unit-integration-tests
 on:
-  pull_request_target:
+  pull_request:
     types:
     - labeled
 env:
@@ -29,12 +29,12 @@ jobs:
   repo-clone:
     if: github.event.label.name == 'ready-to-run'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
     - name: routing-release-repo
       uses: actions/checkout@v4
       with:
-        repository: ${{ github.event.pull_request.head.repo.full_name }}
-        ref: ${{ github.event.pull_request.head.ref }}
         submodules: recursive
         path: repo
     - name: Check out wg-appruntime code