GitHub recommends to not use pull_request_target

See:
https://runs-on.com/github-actions/pull-request-vs-pull-request-target/

Author: Michael Vasseur

.github/workflows/build-contributor-container-PR.yml

@@ -4,7 +4,7 @@ name: 'Build Contributor container (PR)'
 
 on:
   push:
-  pull_request_target:
+  pull_request:
     branches:
       - main
 
@@ -13,7 +13,7 @@ jobs:
     if: ${{ !(github.repository == 'domjudge/domjudge-packaging' &&
               github.ref == 'refs/heads/main') &&
             !contains(github.ref, 'gh-readonly-queue') &&
-            (github.event_name == 'pull_request_target' ||
+            (github.event_name == 'pull_request' ||
              github.event.pull_request.head.repo.full_name != github.repository) }}
     runs-on: ubuntu-latest
     steps:

.github/workflows/build-domjudge-container-PR.yml

@@ -2,7 +2,7 @@ name: 'Build domjudge container (PR)'
 
 on:
   push:
-  pull_request_target:
+  pull_request:
     branches:
       - main
 
@@ -14,7 +14,7 @@ jobs:
     if: ${{ !(github.repository == 'domjudge/domjudge-packaging' &&
               github.ref == 'refs/heads/main') &&
             !contains(github.ref, 'gh-readonly-queue') &&
-            (github.event_name == 'pull_request_target' ||
+            (github.event_name == 'pull_request' ||
              github.event.pull_request.head.repo.full_name != github.repository) }}
     runs-on: ubuntu-latest
     steps:

.github/workflows/build-gitlab-container-PR.yml

@@ -2,7 +2,7 @@ name: 'Build GitLab CI container (PR)'
 
 on:
   push:
-  pull_request_target:
+  pull_request:
     branches:
       - main
 
@@ -11,7 +11,7 @@ jobs:
     if: ${{ !(github.repository == 'domjudge/domjudge-packaging' &&
               github.ref == 'refs/heads/main') &&
             !contains(github.ref, 'gh-readonly-queue') &&
-            (github.event_name == 'pull_request_target' ||
+            (github.event_name == 'pull_request' ||
              github.event.pull_request.head.repo.full_name != github.repository) }}
     name: PR GitLab image
     runs-on: ubuntu-latest

.github/workflows/shellcheck.yml

@@ -7,9 +7,6 @@ on:
   pull_request:
     branches:
       - main
-  pull_request_target:
-    branches:
-      - main
 
 jobs:
   shellcheck: