diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 14258f38..e7e6d9bb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,7 +4,12 @@ on:
   push:
     branches:
       - dev
+  pull_request:
+    branches:
+      - dev
   pull_request_target:
+    branches:
+      - dev
     types:
       - opened
       - synchronize
@@ -70,6 +75,11 @@ jobs:
         if: matrix.exec_profile == 'singularity'
         uses: eWaterCycle/setup-apptainer@main
 
+      - name: Run sensitive task
+        if: github.event.pull_request.base.ref == 'main'
+        run: |
+          echo "Running task with secrets."
+
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@v3
         with: