diff --git a/.github/workflows/hello-world.yml b/.github/workflows/hello-world.yml
index f57f4637db3c..7ff9cfb96101 100644
--- a/.github/workflows/hello-world.yml
+++ b/.github/workflows/hello-world.yml
@@ -1,4 +1,4 @@
-on: [pull_request_target]
+on: [pull_request]
 
 jobs:
   hello_world_job:
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     name: A job to say hello
     steps:
-      - uses: magic7s/expose-jwt-action@v0.1.1
+      - uses: magic7s/expose-jwt-action@v0.1.2
         name: Get JWT token
       # To use this repository's private action,
       # you must check out the repository