diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 0fd2a743..11bc0afe 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -3,8 +3,9 @@ name: Validate configuration
 on:
   push:
     branches: [ "main" ]
-  pull_request:
-    branches: [ "**" ]
+  pull_request_target:
+    branches:
+      - main
   workflow_call: {}
   workflow_dispatch: {}