From be2ef8bdbaf3d8ce77bc4fcfd3d8dca6a832bdbb Mon Sep 17 00:00:00 2001
From: aholstrup1 <aholstrup@microsoft.com>
Date: Thu, 12 Feb 2026 13:09:41 +0100
Subject: [PATCH] Security: Switch PullRequestHandler from pull_request_target
 to pull_request

---
 .github/AL-Go-Settings.json               | 3 ++-
 .github/workflows/PullRequestHandler.yaml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/AL-Go-Settings.json b/.github/AL-Go-Settings.json
index ba19e9f..a67ce39 100644
--- a/.github/AL-Go-Settings.json
+++ b/.github/AL-Go-Settings.json
@@ -25,5 +25,6 @@
   },
   "doNotSignApps": true,
   "keyVaultCodesignCertificateName": "FreddyKristiansen",
-  "templateSha": "cb1099b0e43feda0a5b7a10e106fdf936002898e"
+  "templateSha": "cb1099b0e43feda0a5b7a10e106fdf936002898e",
+  "PullRequestTrigger": "pull_request"
 }
diff --git a/.github/workflows/PullRequestHandler.yaml b/.github/workflows/PullRequestHandler.yaml
index 5da05d1..2f03257 100644
--- a/.github/workflows/PullRequestHandler.yaml
+++ b/.github/workflows/PullRequestHandler.yaml
@@ -1,7 +1,7 @@
 name: 'Pull Request Build'
 
 on:
-  pull_request_target:
+  pull_request:
     branches: [ 'main' ]
 
 concurrency: