From 0ac3c5aaf940bc430c00817538f771b0a3a63745 Mon Sep 17 00:00:00 2001
From: aholstrup1 <aholstrup@microsoft.com>
Date: Thu, 12 Feb 2026 13:09:40 +0100
Subject: [PATCH] Security: Switch PullRequestHandler from pull_request_target
 to pull_request

---
 .github/AL-Go-Settings.json               | 3 ++-
 .github/workflows/PullRequestHandler.yaml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/AL-Go-Settings.json b/.github/AL-Go-Settings.json
index f846c80..e5ed8e5 100644
--- a/.github/AL-Go-Settings.json
+++ b/.github/AL-Go-Settings.json
@@ -25,5 +25,6 @@
     "CertificateProfile": "BCCodeSigningPublic"
   },
   "trackALAlertsInGitHub": true,
-  "templateSha": "975f426167ed623761777eb2560ee7ec7ce0ab5d"
+  "templateSha": "975f426167ed623761777eb2560ee7ec7ce0ab5d",
+  "PullRequestTrigger": "pull_request"
 }
diff --git a/.github/workflows/PullRequestHandler.yaml b/.github/workflows/PullRequestHandler.yaml
index d8141b6..6ac60b0 100644
--- a/.github/workflows/PullRequestHandler.yaml
+++ b/.github/workflows/PullRequestHandler.yaml
@@ -1,7 +1,7 @@
 name: 'Pull Request Build'
 
 on:
-  pull_request_target:
+  pull_request:
     branches: [ 'main' ]
 
 concurrency: