[pull_request_target] allows your workflow to do things like label or comment on pull requests from forks. Avoid using this event if you need to build or run code from the pull request.
Particularly, this prevents me from disabling the build CI for PRs.
From the docs:
Particularly, this prevents me from disabling the build CI for PRs.