diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 3c36c3e9..1b1e9aa6 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -6,10 +6,12 @@ name: Java CI with Maven
 on:
   push:
     branches: [ main ]
-  pull_request_target:
-    types: [ opened, edited, synchronize, ready_for_review, review_requested, review_request_removed ]
+  pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   build: