diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 16152ff..c4e51e5 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -1,6 +1,6 @@
 name: Publish PR Version
 
-on: pull_request_target
+on: pull_request
 
 jobs:
   build:
@@ -54,7 +54,7 @@ jobs:
           name: package-tarball
 
       - name: Publish PR package
-        uses: codfish/actions/npm-publish-pr@v3
+        uses: codfish/actions/npm-publish-pr@fix/tarball-mode-auth
         with:
           tarball: '*.tgz'
           npm-token: ${{ secrets.NPM_TOKEN }}