From f8ef73362b47134dfd6b33dc6f0dc92c1a1f802f Mon Sep 17 00:00:00 2001
From: aholstrup1 <aholstrup@microsoft.com>
Date: Thu, 12 Feb 2026 13:09:35 +0100
Subject: [PATCH] Security: Switch PullRequestHandler from pull_request_target
 to pull_request

---
 .github/AL-Go-Settings.json               | 3 ++-
 .github/workflows/PullRequestHandler.yaml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/AL-Go-Settings.json b/.github/AL-Go-Settings.json
index ea749ac..c2c07a1 100644
--- a/.github/AL-Go-Settings.json
+++ b/.github/AL-Go-Settings.json
@@ -10,5 +10,6 @@
     "companyId": "f1678e37-e50b-ef11-9f8e-6045bdc8c192",
     "ppEnvironmentUrl": "https://orgf287aea1.crm.dynamics.com/"
   },
-  "templateSha": "8fedaa0bba2cf96f8b2b0c57b7d4ba88e9c7069b"
+  "templateSha": "8fedaa0bba2cf96f8b2b0c57b7d4ba88e9c7069b",
+  "PullRequestTrigger": "pull_request"
 }
diff --git a/.github/workflows/PullRequestHandler.yaml b/.github/workflows/PullRequestHandler.yaml
index e2c9378..4cedbb0 100644
--- a/.github/workflows/PullRequestHandler.yaml
+++ b/.github/workflows/PullRequestHandler.yaml
@@ -1,7 +1,7 @@
 name: 'Pull Request Build'
 
 on:
-  pull_request_target:
+  pull_request:
     branches: [ 'main' ]
 
 concurrency: