diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index f25bdd1350..5b834f0856 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -5,16 +5,17 @@
 # Author: Nils Wistoff <nwistoff@iis.ee.ethz.ch>
 
 name: integration
-on: [ push, pull_request_target, workflow_dispatch ]
+on: [ push, pull_request, workflow_dispatch ]
 
 jobs:
   cheshire-integration:
     runs-on: ubuntu-latest
     timeout-minutes: 200
-    if: github.repository == 'pulp-platform/cva6'
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     steps:
       - name: Integrate into cheshire
-        uses: pulp-platform/pulp-actions/integrate@v2.2.0
+        uses: pulp-platform/pulp-actions/integrate@v2.3.0
         with:
           ip-name: cva6
           org: pulp-platform
diff --git a/.github/workflows/verible.yml b/.github/workflows/verible.yml
index 3caa3a2db3..3579170b84 100644
--- a/.github/workflows/verible.yml
+++ b/.github/workflows/verible.yml
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Verible
-on: [push, pull_request_target]
+on: [push, pull_request]
 
 jobs:
   format:
@@ -12,6 +12,8 @@ jobs:
       checks: write
       contents: read
       pull-requests: write
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     steps:
       - uses: actions/checkout@v3
         with: