diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0c20bcc498..9612e8ecbe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,7 +3,7 @@ name: Build and Test
 on:
   push:
     branches: [main, release/*]
-  pull_request:
+  pull_request_target:
     branches: [main]
 
 jobs:
@@ -31,7 +31,6 @@ jobs:
       - uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - uses: dtolnay/rust-toolchain@stable
 
diff --git a/.github/workflows/dev-debian.yml b/.github/workflows/dev-debian.yml
index acc2994aa3..98dca53f21 100644
--- a/.github/workflows/dev-debian.yml
+++ b/.github/workflows/dev-debian.yml
@@ -18,7 +18,6 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - name: install system tools
         run: |
diff --git a/.github/workflows/dev-docker.yml b/.github/workflows/dev-docker.yml
index 65e9c7999c..0fd90882a8 100644
--- a/.github/workflows/dev-docker.yml
+++ b/.github/workflows/dev-docker.yml
@@ -3,14 +3,12 @@ name: Dev Docker Images
 on:
   push:
     branches: [main]
-  pull_request:
-    branches: [main]
 
 jobs:
   docker-build:
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
@@ -20,7 +18,6 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - uses: depot/setup-action@v1
 
diff --git a/.github/workflows/flow.yml b/.github/workflows/flow.yml
index 80b5364891..4b452c900d 100644
--- a/.github/workflows/flow.yml
+++ b/.github/workflows/flow.yml
@@ -1,7 +1,7 @@
 name: Flow build and test
 
 on:
-  pull_request:
+  pull_request_target:
     branches: [main]
   push:
     branches: [main]
@@ -10,7 +10,7 @@ jobs:
   flow_test:
     strategy:
       matrix:
-        runner: [ubicloud-standard-8]
+        runner: [ubicloud-standard-4]
     runs-on: ${{ matrix.runner }}
     timeout-minutes: 30
     services:
@@ -73,7 +73,7 @@ jobs:
 
       - name: run tests
         run: |
-          gotestsum --format testname -- -p 4 ./... -timeout 1200s
+          gotestsum --format testname -- -p 4 ./... -timeout 2400s
         working-directory: ./flow
         env:
           AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
diff --git a/.github/workflows/golang-lint.yml b/.github/workflows/golang-lint.yml
index 4b1821b7fe..adf47ca443 100644
--- a/.github/workflows/golang-lint.yml
+++ b/.github/workflows/golang-lint.yml
@@ -1,6 +1,6 @@
 name: GolangCI-Lint
 
-on: [pull_request]
+on: [pull_request_target]
 
 jobs:
   golangci-lint:
@@ -10,14 +10,13 @@ jobs:
       pull-requests: write
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     steps:
       - name: checkout
         uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - name: golangci-lint
         uses: reviewdog/action-golangci-lint@v2
diff --git a/.github/workflows/rust-lint.yml b/.github/workflows/rust-lint.yml
index 029160274e..1893386ed8 100644
--- a/.github/workflows/rust-lint.yml
+++ b/.github/workflows/rust-lint.yml
@@ -1,5 +1,5 @@
 name: clippy-action
-on: [pull_request]
+on: [pull_request_target]
 jobs:
   clippy:
     permissions:
@@ -8,23 +8,18 @@ jobs:
       pull-requests: write
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     steps:
-    - name: checkout
-      uses: actions/checkout@v3
-      with:
-        submodules: recursive
-        token: ${{ secrets.SUBMODULE_CHECKOUT }}
+      - name: checkout
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
 
-    - uses: dtolnay/rust-toolchain@stable
-      with:
-        components: clippy
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
 
-    - uses: giraffate/clippy-action@v1
-      with:
-        reporter: 'github-pr-review'
-        github_token: ${{ secrets.GITHUB_TOKEN }}
-        workdir: ./nexus
-      env:
-        REVIEWDOG_TOKEN: ${{ secrets.REVIEWDOG_TOKEN }}
+      - name: clippy
+        run: cargo clippy --all-targets --all-features -- -D warnings
+        working-directory: ./nexus
diff --git a/.github/workflows/stable-debian.yml b/.github/workflows/stable-debian.yml
index b58afce10e..e9f3d36091 100644
--- a/.github/workflows/stable-debian.yml
+++ b/.github/workflows/stable-debian.yml
@@ -19,7 +19,6 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - name: install system tools
         run: |
diff --git a/.github/workflows/stable-docker.yml b/.github/workflows/stable-docker.yml
index 8ca0b96522..ad64b29428 100644
--- a/.github/workflows/stable-docker.yml
+++ b/.github/workflows/stable-docker.yml
@@ -9,7 +9,7 @@ jobs:
   docker-build:
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
@@ -19,7 +19,6 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: recursive
-          token: ${{ secrets.SUBMODULE_CHECKOUT }}
 
       - uses: depot/setup-action@v1
 
diff --git a/.github/workflows/ui-build.yml b/.github/workflows/ui-build.yml
index b1acc0de4f..41a4e33957 100644
--- a/.github/workflows/ui-build.yml
+++ b/.github/workflows/ui-build.yml
@@ -13,7 +13,7 @@ jobs:
     name: Build & Test UI
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     steps:
       - name: checkout
@@ -25,4 +25,4 @@ jobs:
 
       - name: Build
         working-directory: ui
-        run: yarn build
\ No newline at end of file
+        run: yarn build
diff --git a/.github/workflows/ui-lint.yml b/.github/workflows/ui-lint.yml
index d8f2e58538..5c697aa3bf 100644
--- a/.github/workflows/ui-lint.yml
+++ b/.github/workflows/ui-lint.yml
@@ -17,7 +17,7 @@ jobs:
     name: Run UI linters
     strategy:
       matrix:
-        runner: [ubuntu-latest, ubicloud]
+        runner: [ubicloud]
     runs-on: ${{ matrix.runner }}
     steps:
       - name: checkout
@@ -33,4 +33,4 @@ jobs:
           eslint: true
           prettier: true
           eslint_dir: ui
-          prettier_dir: ui
\ No newline at end of file
+          prettier_dir: ui